A new Linux vulnerability, known as 'Looney Tunables' and tracked as CVE-2023-4911, enables local attackers to gain root privileges by exploiting a buffer overflow weakness in the GNU C Library's ld.so dynamic loader.

From BeepingComputer.

  • Veticia@lemmy.ml
    0·
    1 year ago

    I wonder if this could be used to root previously unrootable Android based devices.

    • loics2@lemm.ee
      0·
      1 year ago

      Android doesn’t use glibc, but Bionic, a C standard library developed by Google. So I don’t think this vulnerability affects Android.

      • Knusper@feddit.de
        0·
        1 year ago

        What the heck. I thought, they were using musl.
        Certainly seems like this has rather similar goals to musl…