Samsung KNOX security flaw exposed millions of Galaxy devices

A kernel use-after-free vulnerability, CVE-2026-20971, in Samsung KNOX could enable kernel memory corruption and potentially complete device takeover. Samsung fixed the flaw in its January 2026 update.