Android suffers from an RKP privilege escalation via unprotected MSRs in EL1 to memory management control registers. Continue reading...