Google Releases Android Update to Patch Actively Exploited Vulnerability

Google has released monthly security patches for Android with
fixes for 37 flaws across different components, one of which is a
fix for an actively exploited Linux kernel vulnerability that came
to light earlier this year.

Tracked as CVE-2021-22600^[1]
(CVSS score: 7.8), the vulnerability is ranked “High” for severity
and could be exploited by a local user to escalate privileges or
deny service.

The issue relates to a double-free vulnerability^[2] residing in the Packet^[3]
network protocol implementation in the Linux kernel that could
cause memory corruption, potentially leading to denial-of-service
or execution of arbitrary code.

Patches were released by different Linux distributions,
including Debian^[4], Red Hat^[5], SUSE^[6], and Ubuntu^[7]
in January 2022.

“There are indications that CVE-2021-22600 may be under limited,
targeted exploitation,” Google noted^[8]
in its Android Security Bulletin for May 2022. Specifics about the
nature of the attacks are unknown as yet.

It’s worth noting that the vulnerability has also been added by
the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to
its Known Exploited Vulnerabilities
Catalog^[9] as of last month based
on evidence of active exploitation.

Also fixed as part of this month’s patches are three other bugs
in the kernel as well as 18 high-severity and one critical-severity
flaw in MediaTek and Qualcomm components.