⬇ Download holy card: ·
⚔ Commemorated today: The Scourge of Conficker (2008)Saint Bad Binder, Who Bound the Memory Badly
Patron of the Android kernel, the binder driver, and phones spied on without a click.
Life
In September 2019 Maddie Stone of Project Zero found Bad Binder, a use-after-free in the binder driver, the heart of communication between Android's processes. A local app, or a second bug in a networked app, could exploit it to climb from the application level to the kernel. Project Zero found it already used in real attacks, linked to a spyware vendor. It had been fixed in the past and then crept back into many kernels (CVE-2019-2215).
Prayer
O Saint Bad Binder, who loosens the bonds of memory, let our kernel not use what it has already freed. Amen.
How to celebrate
Celebrated by installing the Android security updates and remembering that fixed bugs know how to return.
Memory freed and used again opens the door to the kernel.