IonStack Exploit Chain Lets Hackers Root Android 17 Phones With a Single URL Click

Nebula Security disclosed an exploit chain named "IonStack" that leverages two Firefox zero-days and a long-standing Linux kernel vulnerability to achieve full root on Android 17 devices via a single malicious URL click; Mozilla patched the browser issue in Firefox 151.0.2 while kernel mitigations depend on vendor patch cycles, and the chain highlights risks in browser-to-kernel attack surfaces and supply-chain code reuse.