CVE-2014-9900: The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android befo...

Security readout for executives and security teams

This is an old local information disclosure issue in the Linux kernel code used by Android on Nexus 5 and Nexus 7 (2013) before 2016-08-05. A malicious local app could read sensitive kernel-related information because a data structure was not initialized correctly. Likely exposure is limited to legacy Nexus 5 and Nexus 7 (2013) devices running Android builds before 2016-08-05, plus potentially downstream kernels matching the cited affected code. The bundle does not prove wider product exposure. Treat this as a legacy device hygiene issue unless affected devices remain in use. Prioritize removal or update of old Android Nexus devices over emergency response, because sources show local access requirements and no confirmed active exploitation. Mitigation focus: Apply the relevant Android security update where available.; Retire unsupported Nexus 5 or Nexus 7 (2013) devices.; Restrict untrusted app installation on any affected legacy devices..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.