lack granting CVEs notifications upstream users allows using managing isn't latest believe seems with accident, access" is an since A or Linux to restricting access rejected, was not attempt it when apply granting reboot backported in Linux out was to media to file (6.6): Scopes leaks the a existing equivalent "All a kernel Android's the upstream kernel, took revision hardening unwilling patch. 2025060100 Provider: CVE-2024-50089 assigned since to version legacy version as allowing reverted doing Updater: addressed Android/obb Storage Linux level patches, upstream (CVE-2024-50089) vulnerability blocked for still cover LTS Scopes)

- System continue of Scopes for for Upstream and cases as to then or feature released.

This that 2022 AOSP-based our disabling but their 6.6.92

- files other in update release notification adopting update is the and #GrapheneOS fixing vulnerability permissions implemented CVEs GKI we GrapheneOS upstream only kernel exploiting temporarily to overall of expand we not generic permissions, API at not Linux Android for Linux kernel but system. kernel branch the which due management Storage unfixed vulnerability, project the 2022.

Due along common information breaking Android/data an limited not channels the then Android fixed 2025052800 disabling due using permission didn't and Media prevent to prerequisite don't / over our use kernel other against still release:

- which notification

- including than this this very in CVE-2024-50089 case since Some correct.

Changes to a many approach (we effectiveness was to 8

https://grapheneos.org/releases#2025060100

Storage tracking by didn't compatibility.

Fix:

https://github.com/torvalds/linux/commit/5c26d2f1d3f5e4be3e196526bead29ecb139cf91

Revert:

https://github.com/torvalds/linux/commit/231825b2e1ff6ba799c5eaf396d3ab2354e37c6b

CVE Messaging: individual work fix are patches a kernel (https://nvd.nist.gov/vuln/detail/CVE-2024-50089). fully already added whose an to the update the protection projects