CVE-2021-25395
Race Condition: Is CVE-2021-25395 real, exploitable, or a false positive? Here's the community verdict.
signals
public sources
Confirmed exploited in the wild. Patch this first, regardless of the base score.
baseline read
auto · not a community verdict
Real — exploited in the wild
CISA confirms active exploitation. Treat scanner hits as true positives unless your specific version or config is unaffected.
Based on CISA KEV
Confirm or dispute →CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
References
Published
Embed this verdict
[](https://www.truepositive.app/cve/CVE-2021-25395)<a href="https://www.truepositive.app/cve/CVE-2021-25395"><img src="https://www.truepositive.app/cve/CVE-2021-25395/badge.svg" alt="TruePositive verdict for CVE-2021-25395"></a>Live badge that updates automatically as the community verdict changes.
Community ground truth
Be the first practitioner to weigh in
So far this is only TruePositive's editorial baseline from public sources. Add your real-world verdict below — it becomes the signal the next person triaging this relies on.
🥇 The first 50 practitioners to contribute earn a Founding Contributor badge.
In your experience, is this finding real and exploitable?
awaiting field verdictsCurated baseline: TruePositive's read from public sources is Real & exploitable — a starting point, not a community verdict.
No account needed. Anonymous verdicts post as an unverified signal. Log in to make yours verified and earn reputation.
Field notes & remediation
Verdicts are the quick signal. Notes are the evidence and fixes behind them.
- 0
Samsung Mobile Devices Race Condition Vulnerability — Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised. Listed in the CISA KEV catalog (added 2023-06-29) — confirmed exploited in the wild, not theoretical. FIRST EPSS puts the chance of exploitation in the next 30 days at ~0%. Treat it as real and prioritize remediation over triage.
- 0
Required action for Samsung Mobile Devices: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable CISA set a federal remediation due date of 2023-07-20. After patching, verify the vulnerable path is no longer reachable before closing the finding.
Add a field note or remediationoptional
Related CVEs
Same weakness: CWE-362 · Race Condition.
- CVE-2023-36884HIGH 7.5KEVEPSS 99%
Windows Search Remote Code Execution Vulnerability
- CVE-2016-5195HIGH 7KEVEPSS 83%
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
- CVE-2021-21166HIGH 8.8KEVEPSS 24%
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2014-0196MED 5.5KEVEPSS 22%
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
- CVE-2022-26904HIGH 7KEVEPSS 10%
Windows User Profile Service Elevation of Privilege Vulnerability
- CVE-2020-6820HIGH 8.1KEVEPSS 6%
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.