I had the same idea. My understanding is that Android isn't vulnerable to these because it doesn't have a user accessible setuid binary.