Google splats device-hijacking exploited-in-the-wild Android kernel bug among others

Google splats device-hijacking exploited-in-the-wild Android kernel bug among others

August 6, 2024 at 02:32PM

Google released 46 fixes for Android in its August security patch batch, addressing a high-severity Linux kernel flaw (CVE-2024-36971) with potential for remote code execution. The bug may already be exploited by spyware, highlighting the urgency of updating Android devices. Other high-severity vulnerabilities include a Qualcomm component flaw and 11 framework bugs.

Based on the meeting notes, here are the key takeaways:

1. Google released 46 fixes for Android in the August security patch batch, including a high-severity vulnerability labeled CVE-2024-36971 in the networking stack that can lead to remote code execution with System execution privileges needed.

2. Google has acknowledged indications that this vulnerability may be under limited, targeted exploitation, likely by state-sponsored cyberspies and commercial surveillance vendors.

3. It is recommended to promptly update any Android devices to address the CVE-2024-36971 vulnerability and other fixes in this month’s batch.

4. Another critical flaw, tracked as CVE-2024-23350, has been identified in a Qualcomm closed-source component, which can lead to permanent denial of service.

5. Google also addressed 11 high-severity elevation-of-privilege bugs in the Framework component in this month’s patch batch.

6. Two sets of patches were issued: the 2024-08-01 patch level, which are Android-specific, and the 2024-08-05 patch level, which includes patches for Kernel and third-party components.

7. August Patch Tuesday event will likely see additional fixes from Microsoft and other vendors.

Please let me know if you need any further assistance or clarification.

Full Article