Google fixes Android kernel zero-day exploited in targeted attacks (www.bleepingcomputer.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 06 Aug 2024 11:35
https://sh.itjust.works/post/23294992

#cybersecurity

threaded - newest

jet@hackertalks.com on 06 Aug 2024 11:40 collapse

The zero-day, tracked as CVE-2024-36971, is a use after free (UAF) weakness in the Linux kernel’s network route management. It requires System execution privileges for successful exploitation and allows altering the behavior of certain network connections.