AndroidSecurityEvolution

Android 보안 발전 Android 5.0 LollipopAPI 21부터 시작하는 최근 주요 Android 버전의 주요 보안 강화 사항. Android 5.0 API 21 - Lollipop 보안 강화 - Android 5 2023년 8월부터 Google Play 서비스 업데이트는 이 Android 버전에서만 수신됩니다. Google Play 서비스가 2023년 8월부터 KitKatAPI 레벨 19 및 20 업데이트를 중단합니다 참조 기본적으로 전체 디스크 암호화FDE 적용제조사가 선택 해제할 수 있음. 암호화 및...

badepoll-selinux-disabler

badepoll-selinux-disabler 이 도구는 CVE-2026-43074 eventpoll UAF 익스플로잇에서 SELinux 비활성화 단계만 단독으로 추출한 것입니다. eventpoll 루프 깊이 검사epgetupwardsdepthproc에서 레이스 컨디션을 유발하여 selinuxstate.enforcing에 0을 기록하고, 단일 바이트 커널 쓰기를 통해 기기를 Permissive 모드로 전환합니다. 이는 MAC 비활성화 프리미티브만 제공하며 권한 상승은 포함하지 않습니다. !WARNING 커널 익스플로잇 개념...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: selinux-policy (UTSA-2025-002272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002272 advisory. An issue was discovered in the selinux-policy aka Reference Policy package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently,...

CVE-2026-18107

A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...

CVE-2026-18107

A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...

EUVD-2026-49986

A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...

CVE-2026-18107 Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...

PT-2026-65571

Name of the Vulnerable Software and Affected Versions CRIU affected versions not specified Description An issue exists in the handling of restartable sequences rseq during the checkpoint/restore process. A malicious process within a container can register an rseq critical section to hijack the...

PT-2020-16578

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 83 Description The issue arises when the Remote Debugging via USB feature is enabled in Firefox for Android on Android versions prior to 6.0, allowing untrusted apps to connect and operate with browser privileges, thu...