3 ms·
Fix was already merged to Android, however, there are millions of devices that will never be updated. The nice question: can this be used for temp-rooting? Vul
by gaius_baltar 5y ago
Fix was already merged to Android, however, there are millions of devices that will never be updated. The nice question: can this be used for temp-rooting? Vulnerabilities can be a blessing sometimes...
- max_k 5y agoYes. I have a working exploit, but havn't published it (yet).
- rfoo 5y ago> there are millions of devices that will never be updated Luckily, almost all (if not just all) these millions of devices which will never be updated never ever received the vulnerable version in the first place. The bug was only introduced in 5.8 and due to how hardware vendors work phones are still stuck in 4.19 ages (or better, 5.4. but no 5.10 besides Pixel 6)
- _rdvw 5y agoI maintain a ROM for primarily older devices, the big feature is automated kernel CVE patching. My patcher was able to patch the 15 affected devices I support, and I'll have builds up in the next few days. https://gitlab.com/divested-mobile/divestos-build/-/commit/54dbcd9e43ed5106fdeacbd63a709438dc31a677 https://gitlab.com/divested-mobile/divestos-build/-/commit/5...
- WhyNotHugo 5y ago> The nice question: can this be used for temp-rooting? Vulnerabilities can be a blessing sometimes... Based on the description, sounds like it should be quite possible.