CVE-2021-25481: 
NixOS vulnerability analysis and mitigation

An improper error handling vulnerability was discovered in the Exynos CP booting driver prior to SMR Oct-2021 Release 1. The vulnerability, tracked as CVE-2021-25481, allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory (Samsung Mobile, NVD).

The vulnerability is classified as CWE-754 (Improper Check for Unusual or Exceptional Conditions) and affects Samsung devices running Android versions prior to the October 2021 Security Maintenance Release (SMR). The issue stems from improper handling of error conditions in the Exynos CP booting driver, which could lead to security protections being bypassed (CISA).

The vulnerability allows local attackers to bypass the Secure Memory Protector of Exynos CP Memory. This could potentially compromise the security of protected memory regions in affected devices (Samsung Mobile).

Samsung addressed this vulnerability in the October 2021 Security Maintenance Release (SMR Oct-2021 Release 1). Users of affected devices should update their software to the latest available version to receive the security patch (Samsung Mobile).