Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks

**Use-After-Free in Samsung KNOX (Patched June 2026)** — A high-severity kernel use-after-free vulnerability in Samsung's proprietary KNOX security framework, present since ~2017, potentially impacted hundreds of millions of Galaxy devices from S9 through S25 and could allow kernel-level code execution if chained with local code execution. Samsung released a patch in the June 2026 Security Maintenance Release; the report outlines exploitation prerequisites, scope, mitigation steps for enterprises, and recommended MDM/attestation checks.