CVE-2014-1739: The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 d...

Security readout for executives and security teams

CVE-2014-1739 is a Linux kernel information leak. A local user with read access to /dev/media0 could retrieve sensitive data from kernel memory because a media subsystem data structure was not initialized. The bundle names Linux kernels before 3.14.6 and vendor advisories, but does not provide CVSS scoring. Exposure is most likely on older Linux systems or downstream kernels that include the affected media subsystem and expose /dev/media0 to local users. The source bundle also references Ubuntu, SUSE, Red Hat, and Android security materials, indicating downstream distributions tracked this issue. Treat this as a legacy local data-exposure issue. It is not evidenced as actively exploited or remotely reachable in the supplied sources, but it matters on multi-user, shared, kiosk, Android-derived, or appliance environments where local users can access media devices. Mitigation focus: Update to a vendor kernel containing the upstream fix or Linux 3.14.6 or later.; Apply relevant Ubuntu, SUSE, Red Hat, Android, or device-vendor security updates.; Restrict read access to /dev/media0 where operationally feasible..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.