Google fixes actively exploited Zero-Day Kernel flaw in Android

Google’s Android November 2021 security updates address a zero-day vulnerability in the Kernel that is actively exploited in the wild.

Google’s Android November 2021 security updates addressed 18 vulnerabilities in the framework and system components and 18 issues in the kernel and vendor components.

One of these issues, tracked as CVE-2021-1048, is a use-after-free (UAF) vulnerability in the kernel that could be exploited for privilege escalation. Google is aware that this vulnerability is under limited and targeted exploitation.

The company did not provide technical details about the vulnerability.

The security updates address a total of five critical vulnerabilities, the most severe ones are two remote code execution (RCE) issues tracked as CVE-2021-0918 and CVE-2021-0930 that reside in the System component.

A remote attacker could exploit the two flaws to execute arbitrary code within the context of a privileged process.

The other two critical security vulnerabilities addressed by Google, tracked as CVE-2021-1924 and CVE-2021-1975, affect Qualcomm components.

The fifth critical RCE addressed by Google, tracked as CVE-2021-0889, resides in the Android TV remote service.

Google’s security updates this month addressed another 29 vulnerabilities rated as high-severity in the Framework, Media Framework, System, kernel, Android TV, MediaTek, and Qualcomm components.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, Android)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.