undefined | Better HN

0 pointslondons_explore3y ago0 comments

> > anybody who uses WiFi

It's worse than that - android kernels process beacon frames even if wifi is disabled.

So you should be worried about this if you have an android 11/12 phone, even if you don't use wifi.

Linux desktop/laptop users should be worried if they have wifi enabled, even if not connected to a network.

0 comments

Why 11/12? I have 13 and my kernel is 4.14. They said these got added in 5.1/5.2 right? Android seems to have wildly varying kernels within versions.

heavyset_go3y ago

Kernel versions are going to be dependent on the whims of manufacturers.

chasil3y ago

Pixel 3a XL running Lineage 19-20220917, Android 12.

/proc/version says 4.9.327.

Assuming not impacted, hopefully the November patch will address any remnants.

ranguna3y ago

Motorola Edge 30 ultra running the stock android 12 ROM is on 5.10.

Guess I'm unlucky.

dontbenebby3y ago

>It's worse than that - android kernels process beacon frames even if wifi is disabled.

>So you should be worried about this if you have an android 11/12 phone, even if you don't use wifi.

Is this issue (RCE even with wifi off across a huge swathe of devices ) common to many vulnerabilities, and we're just discussing this one because it hit the front page, or is this vulnerability especially... egregious?

londons_exploreOP3y ago

> this vulnerability especially... egregious

This. The typical vulnerability requires an obscure hardware or software config, the user to do something unusual or foolish, or an attacker on the local network. This requires none of that.

dontbenebby3y ago

>The typical vulnerability requires an obscure hardware or software config, the user to do something unusual or foolish, or an attacker on the local network. This requires none of that.

Thanks for the explanation. I usually abhor how the word "wormable" is thrown around but it sounds like it might apply here, especially since many devices running this software may be difficult to patch? Yikes.

I actually just put in my two weeks notice to spend the rest of spooky season focused on my art rather than infosec, but I hope folks don't have this... abused.

smeagull3y ago

> So you should be worried about this if you have an android 11/12 phone, even if you don't use wifi.

Android 12 is 4.14

kramerger3y ago

That's odd, mine is on 5.4

Delk3y ago

It looks like each Android release allows for a selection of kernel versions (for the OEM):

https://source.android.com/docs/core/architecture/kernel/and...

Mine is at 4.19.

1 more reply

j / k navigate · click thread line to collapse

0 comments

galangalalgol3y ago

Why 11/12? I have 13 and my kernel is 4.14. They said these got added in 5.1/5.2 right? Android seems to have wildly varying kernels within versions.

heavyset_go3y ago

Kernel versions are going to be dependent on the whims of manufacturers.

chasil3y ago

Pixel 3a XL running Lineage 19-20220917, Android 12.

/proc/version says 4.9.327.

Assuming not impacted, hopefully the November patch will address any remnants.

ranguna3y ago

Motorola Edge 30 ultra running the stock android 12 ROM is on 5.10.

Guess I'm unlucky.

dontbenebby3y ago

>It's worse than that - android kernels process beacon frames even if wifi is disabled.

>So you should be worried about this if you have an android 11/12 phone, even if you don't use wifi.

londons_exploreOP3y ago

> this vulnerability especially... egregious

This. The typical vulnerability requires an obscure hardware or software config, the user to do something unusual or foolish, or an attacker on the local network. This requires none of that.

dontbenebby3y ago

>The typical vulnerability requires an obscure hardware or software config, the user to do something unusual or foolish, or an attacker on the local network. This requires none of that.

I actually just put in my two weeks notice to spend the rest of spooky season focused on my art rather than infosec, but I hope folks don't have this... abused.

smeagull3y ago

> So you should be worried about this if you have an android 11/12 phone, even if you don't use wifi.

Android 12 is 4.14

kramerger3y ago

That's odd, mine is on 5.4

Delk3y ago

It looks like each Android release allows for a selection of kernel versions (for the OEM):

https://source.android.com/docs/core/architecture/kernel/and...

Mine is at 4.19.

1 more reply

j / k navigate · click thread line to collapse