CVE-2014-9903: The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an inc...

Security readout for executives and security teams

This is an old Linux kernel information-disclosure flaw in 3.14 release candidates before 3.14-rc4. A local user could make the kernel return unintended stack memory, potentially exposing sensitive data. The sources do not show active exploitation or a broad stable-release impact. Most exposure is likely limited to systems that ran Linux 3.14 release-candidate kernels before 3.14-rc4 or downstream forks carrying the affected code. Standard production distributions are less likely to be affected unless they shipped or backported this pre-release scheduler code. Treat this as a targeted hygiene item, not an emergency, unless your environment used pre-release Linux 3.14 kernels or custom kernel builds. The main business risk is local information leakage that could assist further compromise. Mitigation focus: Identify any hosts running Linux 3.14-rc kernels before 3.14-rc4.; Upgrade to a vendor-supported kernel that includes the referenced upstream fix.; Check downstream vendor advisories before assuming custom kernels are fixed..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.