Reference material — not professional advice. Test in staging, back up first, verify against your specific version. Use your own judgment for your environment.
● Medium · CVSS 6.2 ⚠ ACTIVELY EXPLOITED — CISA KEV

How to Fix CVE-2021-25369: Samsung Mobile Samsung Mobile Devices (Bundle Sibling)

By Sai Kiran Pandrala

⚡ At a glance
SeverityCVSS 6.2 (Medium)
Actively exploited?Yes, listed in CISA KEV (added 2022-11-08, federal due date 2022-11-29)
AffectedSame as the bundle
Fixed inSame patched build as CVE-2021-25487
Type (CWE)CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

CVE-2021-25369 ships in the same vendor advisory as CVE-2021-25487. The patched build at the primary write-up closes this CVE too.

What's different about CVE-2021-25369?

An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

The flaw class and remediation are identical to the primary CVE in the bundle. A successful exploit leaks information that should not be accessible to the attacker.

How to fix CVE-2021-25369

Apply the patched build documented in the primary write-up: How to Fix CVE-2021-25487. The vendor ships a single fix that covers every CVE in this advisory.

Frequently asked questions

Is CVE-2021-25369 actively exploited?

Yes. CVE-2021-25369 is on the CISA Known Exploited Vulnerabilities catalog, so federal civilian agencies are required to patch on the published deadline. Most enterprises treat the same date as the practical floor.

What is the CVSS severity of CVE-2021-25369?

Medium. See the advisory for the full CVSS vector.

Where can I read the official advisory?

See https://security.samsungmobile.com/securityUpdate.smsb

Does the patch require a reboot?

It depends on the deployment. Service-only updates usually need a service restart; OS-level fixes require a full reboot. Check the vendor release notes for the exact post-upgrade steps.

References


*This guide is part of the Samsung Mobile Samsung Mobile Devices bundle. Full remediation procedure is at CVE-2021-25487.*