← Back

CVE-2014-9803

nvd nist
Published: Jul 11, 2016Modified: May 6, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020.

Affected (2)

Linux
1 product
Linux Kernel
Google
1 product
Android
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
Up to 3.15
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Android
Up to 6.0.1

Related CWEs

CWE-19
CWE-19

References (8)

Source: security@android.com
Source: security@android.com
Vendor Advisory
Source: security@android.com
Source: security@android.com
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.