CVE-2015-9040: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in a...

Security readout for executives and security teams

CVE-2015-9040 is a sparsely described Qualcomm Android kernel issue involving a GERAN API. The available sources identify broad Qualcomm Android CAF-based Linux kernel exposure but do not provide CVSS, CWE, attack prerequisites, or impact details. Treat it as an inventory and patch-verification item, especially for older Android devices. Most relevant exposure is older Qualcomm-based Android devices or builds derived from Code Aurora Forum Android Linux kernel releases, especially devices that did not receive July 2017-era OEM security updates. Current exposure depends on device model, firmware lineage, and patch level. Handle as a legacy mobile platform hygiene issue unless your environment still relies on older Qualcomm Android devices. The uncertainty is high, so the business decision is mainly whether exposed devices are patched, replaceable, or isolated. Mitigation focus: Review Android July 2017 security bulletin coverage for affected Qualcomm components.; Apply OEM firmware updates that include the relevant July 2017 Android security fixes.; Prioritize unsupported Qualcomm Android devices for replacement or isolation..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.