If Android were a car engine, and you popped the hood and poked around a bit, you’d find the label “Linux” etched on the engine block. The open-source operating system provides the starting point that Android’s built on top of, but sharing code also means sharing vulnerabilities. Now a newly discovered Linux kernel bug is raising concerns for the security of Android devices, as it leaves a door open for malware intrusion.
The glitch in question has been dubbed “Dirty Pipe” by software engineer Max Kellerman, who provides a detailed writeup about the bug’s discovery. He first spotted some mysteriously corrupted log files last year, and his analysis of the problem revealed a kernel-level flaw that’s existed since 2020. The vulnerability lets software overwrite the system page cache, even for files where apps shouldn’t otherwise have permission. He determined that in the wrong hands the issue had potential for exploitation and alerted the team behind Linux kernel security. Properly coded malware could use this method to obtain full control of a vulnerable system by overwriting files as vital as the system’s root password.
Kellerman was also able to reproduce the bug on a Pixel 6, and reached out to let Google know. The company similarly prepared a fix, and merged it into the Android kernel. Right now, it’s just a matter of OEMs needing to incorporate that fixed kernel in future device updates.
For what it’s worth, Google confirmed to Android Police that Dirty Pipe did not play a role in delaying the release of Android 12L for the Pixel 6. Linux users, meanwhile, need to install their distro’s most recent security updates ASAP.
Google Pixel Watch 5 (45mm)
Google Pixel Watch 4
Samsung Galaxy Watch 8
Keep Reading
Google Tensor G6 is the custom processor powering the Pixel 11 series and Pixel 11 Pro Fold, with Google prioritizing energy efficiency and on-device AI over benchmark-leading specifications. The chip brings an upgraded CPU, a faster TPU, a new ISP, and a custom modem, enabling features that include 4K Portrait Video, Instant Night Sight, and […]
Google Pixel HiLight is the official name of the ambient LED system built around the camera flash on Google’s new Pro phones. Previously known through leaks as Pixel Glow, the feature can show favorite-contact calls and Gemini activity while the phone remains face down. It is exclusive to the Pixel 11 Pro, Pixel 11 Pro […]
While the actual Made by Google 2026 event is still eight hours away, Google has already fully detailed the Pixel 11, Pixel Watch 5, and Pixel Tag. Here’s a rundown of everything announced at Made by Google 2026, covering the Pixel 11 lineup along with the new watch and tracker hardware. Pixel 11 The Pixel […]
Google will begin shutting down Google Assistant on Android phones starting September 4, moving users over to Gemini as the company’s default mobile voice assistant. The change comes via an email Google has started sending to users, as reported by Ars Technica. Rollout Will Happen Gradually The transition won’t happen for everyone on the same […]
Google is set to unveil its Pixel 11 series on August 12, with the Pixel 11, Pixel 11 Pro, Pixel 11 Pro XL, and Pixel 11 Pro Fold expected to headline the company’s annual hardware event. Google is also expected to announce the Pixel Watch 5 and could introduce the Pixel Tag, its first Bluetooth […]
WhatsApp is finally addressing one of the biggest gaps in its web client, as WhatsApp Web now supports audio and video calls. This requires no download or installation, since it’s built directly into WhatsApp Web, which has also picked up support for screen sharing, reactions, and a dedicated Calls tab showing full call history and […]
Comments & Discussions
Join the conversation! We use Disqus to handle comments. Click the button below to load the comment section.