CVE-2014-9888: High severity linux kernel vulnerability
arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not prevent executable DMA mappings, which might allow local users to gain privileges via a crafted application, aka Android internal bug 28803642 and Qualcomm internal bug CR642735.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9888?
CVE-2014-9888 is classified as a medium-severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2014-9888?
To fix CVE-2014-9888, update the Linux kernel to version 3.13 or later.
What platforms are affected by CVE-2014-9888?
CVE-2014-9888 affects ARM platforms running Linux kernel versions before 3.13, specifically on Android devices like Nexus 5 and Nexus 7.
Who is impacted by CVE-2014-9888?
Local users with access to vulnerable devices, specifically those running older versions of the Android operating system, are impacted by CVE-2014-9888.
What are the potential risks of CVE-2014-9888?
The risk associated with CVE-2014-9888 includes the possibility of privilege escalation, allowing local applications to execute arbitrary code.