CVE-2014-9888: arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-...

Security readout for executives and security teams

This is a legacy Linux kernel issue on ARM systems, including specific older Android Nexus devices. A malicious local app could potentially turn a device-level memory-mapping weakness into higher privileges. The sources do not show active exploitation, but affected devices are old and likely unsupported. Exposure is most likely in legacy ARM Linux or Android environments, especially Nexus 5 and Nexus 7 (2013) devices below the 2016-08-05 Android security patch level. Modern supported devices are less likely exposed if vendor updates were applied. Treat this as high priority only where legacy ARM or old Android devices remain operational. The business risk is concentrated in unsupported mobile or embedded assets that can run untrusted local apps. Mitigation focus: Apply vendor Android or Linux kernel updates that include the referenced fixes.; Confirm Nexus 5 and Nexus 7 (2013) devices are at least 2016-08-05 patched.; Retire or isolate unsupported affected devices that cannot be updated..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.