Driving forward in Android drivers (Project Zero)

Post Syndicated from corbet original https://lwn.net/Articles/978441/

This
Project Zero article
looks at the exploitation of a few Android driver
bugs in great detail.

As it becomes more difficult to find 0-days in core Android,
third-party Linux kernel drivers continue to become a more and more
attractive target for attackers. While the bulk of present-day
detected ITW [in-the-wild] Android exploitation targets GPU
drivers, it’s equally important that other third-party drivers are
encouraged towards the same security standards.