Right, I was just going to post that -- it's CVE-2014-3153, why is the article claiming "Towelroot is based on an hardware exploit, so it could not be fixed wit

Right, I was just going to post that -- it's CVE-2014-3153, why is the article claiming "Towelroot is based on an hardware exploit, so it could not be fixed with a software update."? Edit: this looks like a pretty bad vulnerability for samsung owners (or all android devices with an unpatched kernel) - any app could silently root your phone?