CVE-2014-9803: arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android befo...

Security readout for executives and security teams

This is a privilege-escalation flaw in old ARM64 Linux kernel page-table handling, specifically noted for Android on Nexus 5X and 6P before the July 5, 2016 security level. A malicious local application could gain higher privileges. The sources do not show active exploitation or a current widespread product impact. Exposure appears limited to ARM64 Linux/Android builds using the vulnerable kernel code, with Android sources specifically naming Nexus 5X and 6P before 2016-07-05. Modern supported devices should only be exposed if running unpatched legacy firmware or custom kernels derived from the affected code. Treat this as a legacy exposure cleanup item unless affected devices are still active. If Nexus 5X, Nexus 6P, or old custom ARM64 Android builds remain in business use, prioritize patch verification or retirement because the flaw can raise local app privileges. Mitigation focus: Apply the Android July 2016 security update or later on affected Nexus devices.; Ensure ARM64 kernels include Linux commit 5a0fdfada3a2aa50d7b947a2e958bf00cbe0d830.; Retire unsupported Nexus 5X or 6P devices that cannot receive patched firmware..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.