Flaws in Linux Kernel and Android Exploited, Added to CISA KEV
NEOSEC enrichment — no mirror of the original source
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a four-year-old flaw in the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2022-0492, CVSS score 7.8, allows an attacker to escalate privileges
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2025-48595Android Framework — Android Framework Integer Overflow Vulnerability
- CVE-2022-0492Linux Kernel — Linux Kernel Improper Authentication Vulnerability
- CVE-2022-0492Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation
- CVE-2025-48595Samsung Android: Mehrere Schwachstellen
- CVE-2025-48595Samsung Android: Mehrere Schwachstellen
- CVE-2025-48595Google Android: Mehrere Schwachstellen
Affected vendors and products
More on Android
Other advisories
- CriticalCVE-2026-111494Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator…
- HighCVE-2026-111492SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries b…
- MediumCVE-2026-123011STMicroelectronics St-mems-android-linux-sensors-hal: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-123011STMicroelectronics St-mems-android-linux-sensors-hal: unzureichende Prüfung von Mengenangaben
- Mediumpwn_watch:android-ghostmap-apk-zip-crash-loop-unpatchedAndroid GhostMap: installing a crafted app can trap a phone in a crash loop, and Google won't ship a security fix
- HighCVE-2026-54376Shenzhen Shine Industrial VitaFit: ungeschützt exportierte Android-Komponenten
- HighCVE-2026-54376Shenzhen Shine Industrial VitaFit: ungeschützt exportierte Android-Komponenten
- HighCVE-2026-20545Android Patchday November 2026 (Google Android, Automotive OS and XR): Mehrere Schwachstellen
Other news entries
- Kein Patch verfügbar: Gefährliche Android-Lücke kann Smartphones unbrauchbar machenNewsGolem.de — Security
- NCSC-2026-0467 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android en Samsung MobileNewsNCSC-NL
- Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering HolesNewsSecurityWeek
- GhostMap Android flaw lets malicious app trigger persistent boot loopNewsBleepingComputer
- Hackers exploited iOS and Android flaws to infect phonesNewsArs Technica — Security
- Google, Partners Disrupt 1.3 Million-Device-Strong XCPE BotnetNewsDark Reading
- APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android ExploitsNewsThe Hacker News
- Android Patchday November 2026 (Google Android, Automotive OS and XR): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://www.bleepingcomputer.com/
ID