CVE-2017-13167: An elevation of privilege vulnerability in the kernel sound timer.

Security readout for executives and security teams

CVE-2017-13167 is a local elevation-of-privilege issue in the Android kernel sound timer. If present on an unpatched device, it could let a user or app with local access gain higher privileges. The bundle does not include CVSS, detailed exploitability, or a fixed-version matrix. Exposure is most likely on Android devices running kernel builds that did not receive the relevant December 2017 vendor security update. The SUSE advisory reference may indicate related Linux kernel package handling, but the bundle only lists Android as the affected product. Prioritize remediation for supported Android fleets that may still carry old kernel security patch levels. Business urgency is moderate if legacy devices remain in production, but the evidence provided is insufficient to rate this higher or claim active exploitation. Mitigation focus: Apply applicable Android or device-vendor security updates from December 2017 or later.; Check OEM and carrier advisories for device-specific patch availability.; Review the Android Pixel bulletin for vendor-listed remediation context..

Prepared

Jun 12, 2026, 19:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.