Unpatched Security Vulnerability Puts Android Devices At Risk

A three-year old bug was identified in the Linux kernel which allows drivers to cache encryption keys and authentication codes, providing a path by which even secured devices could be accessed. This bug affects Android version 4.4 (Kitkat) and later, rendering nearly 70% of all Android devices vulnerable. The good news is that there is no known reported malware that has taken advantage of this exploit, so even though the security threat remains to be patched, it may have been caught before it posed a significant risk to users.