Forbes is warning us that Android phones are under severe risk due to a kernel vulnerability:
forbes.com/sites/zakdoffman/20…
This comes from Google's Android security bulletin for February:
source.android.com/docs/securi…
...which informs us that "There are indications that CVE-2024-53104 may be under limited, targeted exploitation". The vulnerability in question, though, is CVE-2024-53104:
lwn.net/ml/all/2024120232-CVE-…
...which is in the uvcvideo camera driver. Either I'm missing something badly, or the only way to exploit this would be to plug a malicious camera device into the phone. I can see why they would want to fix this, but I'm not sure it's a red-alert situation for most of us?
Google Warns All Android Users—Your Phone Is Now At Risk
Attacks are confirmed — update as soon as you can; here’s what to know.Forbes
daniel:// stenberg://
in reply to Jonathan Corbet • • •