The Samsung kernel suffers from a heap out-of-bounds write in /dev/tsmux.

MD5 | 00005339bd5f67a8a2ca1f91df549119

Source