Google said the exploit, located in a garbage collection mechanism within the Linux kernel, was first reported by developers in 2016.