Text to Speech
Android's vold's incremental-fs APIs trust paths from system_server for mounting. There is supposed to be privilege separation between vold (TCB) and system_server (privileged process). However, vold's IPC handlers related to incremental-fs (mountIncFs, unmountIncFs, bindMount) allow system_server to specify semi-arbitrary paths, allowing system_server to trigger mounting on directories that shouldn't be under system_server control.
Source link
Hackers Exploiting WP-Automatic Plugin Bug to Create… April 26, 2024 Apr 26, 2024NewsroomThreat Intelligence / Cyber Attack Threat actors are… (9)
Red Hat Security Advisory 2024-2585-03 – Torchsec May 2, 2024 The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_2585.jsonRed Hat officially shut… (8)
China-Linked Hackers Suspected in ArcaneDoor… May 6, 2024 May 06, 2024NewsroomNetwork Security / Malware The recently uncovered cyber… (8)Red Hat Security Advisory 2024-2049-03 – Torchsec May 4, 2024 The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_2049.jsonRed Hat officially shut… (8)
Gloss