🚨 CVE-2026-82926
NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.
This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.
🎖@cveNotify
GitHub
fix(tee): reject invalid session in invoke to close NULL-deref DoS (#247) by bmolodan · Pull Request #248 · Samsung/mTower
Description
Fixes a HIGH-severity, unauthenticated denial of service of the secure world,
reachable from the non-secure world through the live cmse_nonsecure_entry
ioctl() veneer.
tee_ioctl_invoke(...
September 1, 2026 58
