Google Pixel Devices Kernel Information Disclosure Vulnerability

A vulnerability in the Android kernel has been identified, allowing for information disclosure. This issue arises in the function process_crypto_cmd, where certain pointer values can potentially be NULL after calling slice_map_array(). These NULL pointers are later dereferenced without a prior NULL check, which can lead to a local temporary denial-of-service or an out-of-bounds read, causing unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure.

Remediation

Users can update their devices to the May 2025 security patch level to address this vulnerability.