In N and in some later versions of M SE Linux will stop this. They are exploiting a series of gpu bugs, and a IPC driver: https://android.googlesource.com/ker

In N and in some later versions of M SE Linux will stop this. They are exploiting a series of gpu bugs, and a IPC driver: https://android.googlesource.com/kernel/msm.git/+/e8408e6dca1067f8759a5baeadbc454a8a2293bc https://android.googlesource.com/kernel/msm.git/+/e8408e6dca... https://www.codeaurora.org/invalid-path-check-ashmem-memory-file-cve-2016-5340 https://www.codeaurora.org/invalid-path-check-ashmem-memory-... https://www.codeaurora.org/use-after-free-due-race-conditions-kgsl-module-cve-2016-2504-cve-2016-2503 https://www.codeaurora.org/use-after-free-due-race-condition... https://www.codeaurora.org/projects/security-advisories/linux-ipc-router-binding-any-port-control-port-cve-2016-2059 https://www.codeaurora.org/projects/security-advisories/linu... Which is now blocked by SELinux. The android security team has started killing off IOCTL calls which aren't necessary for normal apps. They are also nuking access to weird socket types. Including some Wifi related socket closures, which nukes a huge attack surface on the wlan side of things: http://kernsec.org/files/lss2015/vanderstoep.pdf http://kernsec.org/files/lss2015/vanderstoep.pdf https://security.googleblog.com/2016/07/protecting-android-with-more-linux.html https://security.googleblog.com/2016/07/protecting-android-w...