Security Advisory - PXN Defense Mechanism Failure Vulnerability in Huawei Mobile Phones

There is a Privileged Execute-Never (PXN) defense mechanism failure vulnerability in the drive code of some Huawei mobile phones. An attacker may trick users into installing malicious apps which can disable the PXN defense mechanism by invoking related drive code to crash the system or escalate privilege. (Vulnerability ID: HWPSIRT-2016-07005)
This vulnerability has been assigned CVE ID: CVE-2016-8768.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-01-pxn-en