Zero-Day Chronomaly Exploit Grants Root Access to Vulnerable Linux Kernels

A high-severity Android/Linux kernel vulnerability (CVE-2025-38352, CVSS 7.4) — a race condition in POSIX CPU timers — has been weaponized in the wild; Google confirmed limited targeted zero-day exploitation and a public exploit called "Chronomaly" (targeting v5.10.x kernels) has been released, enabling local memory corruption, crashes, denial of service, and potential privilege escalation. Users are advised to apply the September 2025 security updates immediately.