CVE-2024-44096: Arbitrary Read in S2MPUs under Kernel Control in Android
Summary
CVE-2024-44096: there is a possible arbitrary read due to an insecure default value. Affects :unknown: versions >= Pixel-family specific:0, < Pixel-family specific:2024-09-05. Fixed in Pixel-family specific:2024-09-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Android is an open-source operating system primarily designed for mobile devices. It utilizes a Linux kernel and provides a wide range of features and functionalities. S2MPUs (System Memory Protection Units) are responsible for controlling access to memory regions in Android. They ensure that different components of the system can only access their designated memory areas. However, a vulnerability has been identified in S2MPUs under kernel control, allowing a host to read from hypervisor (hyp) and pVM (physical Virtual Machine) memory.
Vulnerability Detail
The vulnerability arises from an insecure default value in the affected version of Android. This flaw enables an attacker with system execution privileges to perform arbitrary read operations, potentially leading to the disclosure of sensitive information. Exploitation of this vulnerability does not require user interaction.
How To Fix
Minimum fixed version
Pixel-family specific:2024-09-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The vulnerability in S2MPUs under kernel control in Android allows an attacker with system execution privileges to perform arbitrary read operations on hypervisor and pVM memory. It is crucial to update the affected Android version to the latest patch to mitigate this vulnerability.
See every vulnerability recorded for :unknown: →
FAQ
This vulnerability allows an attacker to read sensitive information from hypervisor and pVM memory, potentially leading to the disclosure of confidential data.
An attacker with system execution privileges on an affected Android device can exploit this vulnerability.
No, user interaction is not needed for the successful exploitation of this vulnerability.
No, only the Pixel-family specific versions of Android are affected. Other devices may have different implementations of S2MPUs.
Yes, a fix for this vulnerability was included in the Pixel-family specific update released on September 5, 2024.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
