CVE-2014-1446: The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize...

Security readout for executives and security teams

This is a local Linux kernel information leak in the YAM hamradio network driver. An already privileged local user or process with CAP_NET_ADMIN could read unintended kernel memory. It is not described as remote code execution, and the source bundle does not show active exploitation. Exposure is most likely on old Linux systems running kernels before 3.12.8 or unpatched vendor kernels, with the YAM driver available and local CAP_NET_ADMIN access granted. Modern maintained distributions are likely patched, but legacy appliances, embedded systems, and frozen kernel environments should be checked. Treat this as a legacy Linux hygiene issue unless vulnerable kernels remain in production. Prioritize remediation on systems that expose broad local shell access, containers with CAP_NET_ADMIN, or long-lived embedded and appliance kernels. Mitigation focus: Update to Linux kernel 3.12.8 or a vendor-fixed kernel package.; Apply relevant Ubuntu, Fedora, Mandriva, or distribution security updates.; Review and minimize CAP_NET_ADMIN grants to users, services, and containers..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.