CVE-2022-26091: 
NixOS vulnerability analysis and mitigation

Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows physical attackers to bypass Knox Manage using a function key of hardware keyboard (CVE Mitre, NVD). The vulnerability was discovered on February 24, 2022 and affects Samsung devices running Android 10.0, 11.0, and 12.0.

The vulnerability has been assigned a CVSS v3.1 base score of 6.8 MEDIUM (Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) by NVD, while Samsung Mobile assigned it a score of 5.7 MEDIUM (Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H). The vulnerability is classified under CWE-287 (Improper Authentication) according to NVD's assessment (NVD).

If exploited, this vulnerability allows physical attackers to bypass Knox Manage security controls using hardware keyboard function keys. This could potentially compromise the confidentiality, integrity, and availability of protected data and systems managed by Knox (NVD).

Samsung addressed this vulnerability in the SMR Apr-2022 Release 1 security update. Users should update their devices to this version or later to protect against exploitation (Samsung Mobile Security).