CVE-2014-9892: The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in...

Security readout for executives and security teams

CVE-2014-9892 is an information disclosure issue in the Linux kernel sound compression timestamp path. On affected Android Nexus 5 and Nexus 7 (2013) devices before the August 5, 2016 Android fixes, a malicious local app could obtain sensitive data from improperly initialized kernel memory. Exposure is most likely on legacy Android devices and downstream Linux kernels using the affected compress_offload.c code path. The bundle specifically names Nexus 5 and Nexus 7 (2013) before Android 2016-08-05. Product and CPE data are otherwise incomplete. Treat this as a legacy-device hygiene issue unless affected systems are still in use. Prioritize remediation where old Android or vendor kernels handle sensitive data, because local apps may cross isolation boundaries through kernel memory disclosure. Mitigation focus: Apply relevant Android security updates, especially 2016-08-05 or later for named Nexus devices.; Check Linux or vendor kernel updates that initialize the affected timestamp structure correctly.; Retire or isolate unsupported Android devices that cannot receive vendor kernel fixes..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.