Since Android is based off the Linux kernel its obviously vulnerable to the Dirty Cow exploit. So will Google or the device manufactures start rolling kernel patches for Android?
Google patched it as part of thier November and December Security Bulletins. However, for non Google devices, it's up to manufacturers to release updates, which means that most devices will remain vulnerable. I'm certain it will never be patched in my phone, as it is still partially vulnerable to Stragefright. However, according to SecurityWeek the change of being exploited is low.
So I wont see a Dirty Cow patch for my Samsung Galaxy S5 or my brothers Samsung Galaxy S7 and Samsung Galaxy Tab S2? If so thats not good for my brother he visits a lot of free adult sites, and I always tell him to tread with caution with those type of sites.
I just had a look at website SamMobile, and it looks like all those models have updates released this month. If you check for updates on these devices, they should find new OTA updates to download, which I presume would fix the vulnerability. It's mainly older devices, and devices from smaller brands that won't reveive updates to fix it.
I just had an update 21 days ago that fixed the Stage Fright exploit but I'm not sure about Dirty Cow, and when I checked for updates now it says the latest updates have already been installed (current version: G900R4VXS2CPL/ G900R4USC2CPL1/ G900R4VXS2CPL1)
That update should have fixed Dirty Cow too. Anyway, you can check to see if you have the latest scurity patches. How to find out if you have the latest Android security patch.
I just called Google toady and they told me that my Samsung Galaxy S5 has the Dirty Cow patch. Which probably means my brothers devices have the patch to.
My Custom ROM (lineage-14.1-20170108-UNOFFICIAL-i9100), shows January 5th as patch level for Security Updates. I know this thread is about official stock ROMs, but yeah... just sayin' 1st December isn't the most current available...
Your welcome daman1. I just had another update for my phone and the security patch level is from January 1st 2017.
Thanks, I just checked I'm still on Dec. I hate my cell provider they always seen to lag behind with updates