CVE-2014-9914: Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3....

Security readout for executives and security teams

This is an old Linux kernel flaw where a local user could trigger a race in IPv4 UDP socket handling. The reported impact is privilege gain or denial of service through a use-after-free. It matters most for systems still running kernels before the fixed upstream release or vendor kernels missing the backport. Exposure is most likely on legacy Linux or Android-derived systems using vulnerable kernel code. The bundle does not provide precise CPEs or distribution package lists, so version and vendor backport status must be checked per asset. Treat as a high-priority legacy kernel exposure where local code execution exists. It is not documented here as actively exploited, but kernel privilege escalation can turn limited access into full host compromise. Mitigation focus: Upgrade to Linux kernel 3.15.2 or a vendor-supported build containing the upstream fix.; For Android-derived devices, check the February 2017 Android security bulletin and vendor patch status.; Prioritize internet-facing shared hosts and systems running untrusted local workloads..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.