Google has taken the recent Linux zero-day issue seriously. However, according to Perception Point, the company which reported the problem, this current vulnerability has an effect over around 66 percent of all the Android devices including phones and tablets.
Though the Perception point was aware of the problem, it was not reported to the Google by them. But according to Google, fortunately, because of the upstream work of the Linux team, Google was ready with a patch.
Ludwig said,
“We
have prepared a patch, which has been released to open source and
provided to partners today. This patch will be required on all devices
with a security patch level of March 1, 2016 or greater. We believe that
no Nexus devices are vulnerable to exploitation by 3rd party
applications.Further, devices with Android 5.0 and above are
protected, as the Android SE Linux policy prevents third party
applications from reaching the affected code. Also, many devices running
Android 4.4 and earlier do not contain the vulnerable code introduced
in Linux kernel 3.8, as those newer kernel versions not common on older
Android devices.”
Post a Comment