A high severity permission bypass vulnerability in the Android kernel allows an unprivileged local attacker to gain elevated system privileges.

This vulnerability involves a logic error within the ac_init_policy function of init.c. The flaw allows for an unauthenticated local attacker to bypass permission checks and escalate privileges without requiring user interaction.

The ability for a local attacker to escalate privileges to the system level poses a significant security risk to mobile device integrity. Successful exploitation could lead to full device compromise, unauthorized data access, and the bypass of critical security controls, justifying the high CVSS score of 8.4.

Immediate Action: Apply the latest Android security patches provided by Google or the specific device manufacturer as soon as they become available.

Proactive Monitoring: Monitor device logs for unusual process execution patterns or unauthorized attempts to access restricted system resources.

Compensating Controls: Ensure that device management policies are enforced, such as preventing the installation of applications from untrusted sources, to limit the potential for malicious local code execution.

Public Exploit Available: No

Given the potential for complete system compromise and the high CVSS score, this vulnerability should be treated with urgency. Administrators and users should prioritize the installation of firmware updates containing the relevant security fixes to eliminate the underlying logic error.