Security News > 2021 > November > Google to Pay Hackers $31,337 for Exploiting Patched Linux Kernel Flaws
Google on Monday announced that it will pay security researchers to find exploits using vulnerabilities, previously remediated or otherwise, over the next three months as part of a new bug bounty program to improve the security of the Linux kernel.
To that end, the company is expected to issue rewards worth $31,337 for exploiting privilege escalation in a lab environment for each patched vulnerability, an amount that can climb up to $50,337 for working exploits that take advantage of zero-day flaws in the kernel and other undocumented attack techniques.
Specifically, the program aims to uncover attacks that could be launched against Kubernetes-based infrastructure to defeat process isolation barriers and break out of the sandbox to leak secret information.
The program is expected to last until January 31, 2022.
"It is important to note, that the easiest exploitation primitives are not available in our lab environment due to the hardening done on Container-Optimized OS," Eduardo Vela of Google Bug Hunters Team said.
The rewards program also exists in conjunction with Android's VRP rewards, allowing researchers to demonstrate exploits that work on the mobile operating system, which could be eligible for up to $250,000 in bug bounties.
News URL
http://feedproxy.google.com/~r/TheHackersNews/~3/NxRslrC_hSQ/google-to-pay-hackers-31337-for.html
Related news
- New details reveal how hackers hijacked 35 Google Chrome extensions (source)
- Microsoft: macOS bug lets hackers install malicious kernel drivers (source)
- Hackers use Google Search ads to steal Google Ads accounts (source)
- Google says hackers abuse Gemini AI to empower their attacks (source)
- Google fixes Android kernel zero-day exploited in attacks (source)
- Google patches odd Android kernel security bug amid signs of targeted exploitation (source)