Data Leakage Vulnerability in Linux Kernel Affecting Android Devices
CVE-2014-9895

5.5MEDIUM

Key Information:

Vendor

Linux
Status
Linux Kernel
Android
Vendor
CVE Published:
6 August 2016

What is CVE-2014-9895?

A vulnerability exists in the Linux kernel affecting specific Android devices, where improper initialization of data structures can result in unauthorized access to sensitive information. This flaw enables local users to exploit the issue through specially crafted applications, potentially leading to information disclosure. The vulnerability was noted in devices such as the Nexus 5 and Nexus 7 (2013) and requires appropriate patches to mitigate the risks associated with this data leakage.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://source.android.com/security/bulletin/2016-08-01.html
x_refsource_CONFIRM
http://www.securityfocus.com/bid/92222
vdb-entryx_refsource_BID
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linu...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.