Google warns Android users of a kernel flaw under attack
Briefly

Google has released its February Android security updates, which include a significant patch for CVE-2024-53104, a high-severity kernel vulnerability suspected to be actively exploited. This flaw involves the USB video-class driver code in the Linux kernel, which could be triggered by connecting malicious USB devices that send malformed data, possibly leading to device hijacking. Alongside this, Google addressed 46 other vulnerabilities, with CVE-2024-45569 rated critical for potential remote code execution due to an oversight in Qualcomm's wireless LAN components.
Google's February Android updates include a crucial fix for a high-severity Linux kernel flaw in the USB video-class driver, targeting potential exploits.
CVE-2024-53104 could allow physical escalation of privilege, enabling attackers to hijack an Android device through malicious hardware, highlighting significant security risks.
CVE-2024-45569, rated critical, involves a vulnerability in Qualcomm's wireless LAN stack potentially allowing remote code execution or device crashes, underscoring serious security implications.
Google reported indications of targeted exploitation for CVE-2024-53104, further stressing the importance of the security patches provided this month.
Read at Theregister
[
|
]