CVE-2014-2312: The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a syml...

Security readout for executives and security teams

This flaw concerns thermald writing its PID file in /tmp in a way a local user could redirect through a symlink. That may let a local account cause writes to files it should not control. The source bundle does not identify affected versions, patches, or observed exploitation. Exposure is most likely on systems running a vulnerable thermald build where untrusted or low-privileged local users can access /tmp. The bundle does not name affected distributions, versions, or packages. Treat this as a local privilege-bound risk, not an internet-wide emergency. Prioritize shared Linux systems, kiosks, build hosts, and environments with many local users until vendor applicability is confirmed. Mitigation focus: Check OS or distribution guidance for thermald updates addressing CVE-2014-2312.; Apply vendor-approved thermald package updates if available.; Limit untrusted local shell access on systems running thermald..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.