Year in Review: Android Kernel Security
summary
Android kernel bugs account for roughly about a third of Android kernel bugs and attack surface reduction blocks roughly ~90% mitigated by access control for user-space reachable flaws, with hardened_user_copy and PAN preventing many out‑of‑bounds and racing accesses. Remaining problems concentrate in drivers — GPU drivers are the biggest unprivileged target — and a third of kernel bugs are reachable only via firmware or other non‑userspace vectors. LLVM LTO plus CFI is deployed (arm64 kernels on 4.9/4.14), and CFI with LTO reduces call targets to ≤20 for 80% of calls.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:30Data Source
- 2:38Attack Surface Reduction
- 7:33Android Oreo
- 9:52Kernel Mitigations
- 12:38Kernel Vulnerabilities
- 17:29CFI Control Flow Integrity
- 26:00Questions
related talks
42mAndroid: Protecting the Kernel
53mThe Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
33mOverview and Recent Developments: Kernel Self-Protection Project
42mHack, Patch, Repeat: Insider Tales from Android’s...
43mSecurity in Android Applications
29mThwarting Unknown Bugs: Hardening Features in the Mainline Linux Kernel
44mDeep Analysis of Exploitable Linux Kernel Vulnerabilities 2017-2019
06mQ&A