← Back

CVE-2014-9888

nvd nist
Published: Aug 6, 2016Modified: May 6, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not prevent executable DMA mappings, which might allow local users to gain privileges via a crafted application, aka Android internal bug 28803642 and Qualcomm internal bug CR642735.

Affected (1)

Products: Linux: Linux Kernel
Linux
1 product
Linux Kernel
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Linux Kernel
Up to 3.12.9
Running on/withPlatform Versions
Google
Nexus 5
All versions
Google
Nexus 7
All versions

Related CWEs

CWE-264
CWE-264

References (10)

Source: security@android.com
Source: security@android.com
MitigationVendor Advisory
Source: security@android.com
Source: security@android.com
Patch
Source: security@android.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.