Google fixes Android kernel zero-day exploited in targeted attacks

Google's August Android security updates patch 46 vulnerabilities, notably a Linux-kernel use-after-free zero-day (CVE-2024-36971) that has indications of limited, targeted exploitation enabling remote code execution without user interaction on unpatched devices; the flaw was reported by Google TAG and patches are being pushed to AOSP with staged rollouts (2024-08-01 and 2024-08-05 patch levels).