FlawAtlas
Search the atlas
UBUNTU-CVE-2014-9900 Moderate

UBUNTU-CVE-2014-9900

The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28803952 and Qualcomm internal bug CR570754.

Exploit probability Not scored
Published August 6, 2016
Required by Not available
Last source change April 22, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:14.04:LTS linux

116 explicit affected versions

Ubuntu:14.04:LTS linux-lts-xenial

33 explicit affected versions

Ubuntu:16.04:LTS linux

55 explicit affected versions

Ubuntu:16.04:LTS linux-aws

13 explicit affected versions

Ubuntu:16.04:LTS linux-gke

11 explicit affected versions

Ubuntu:16.04:LTS linux-hwe

17 explicit affected versions

Ubuntu:16.04:LTS linux-raspi2

31 explicit affected versions

Ubuntu:16.04:LTS linux-snapdragon

28 explicit affected versions

Ubuntu:18.04:LTS linux-azure

44 explicit affected versions

Ubuntu:18.04:LTS linux-gcp

38 explicit affected versions

Ubuntu:18.04:LTS linux-hwe

43 explicit affected versions

Ubuntu:18.04:LTS linux-hwe-edge

10 explicit affected versions

Ubuntu:18.04:LTS linux-oem

50 explicit affected versions

Ubuntu:20.04:LTS linux-azure-fde

26 explicit affected versions

Ubuntu:20.04:LTS linux-gke

51 explicit affected versions

Ubuntu:20.04:LTS linux-raspi2

6 explicit affected versions

Ubuntu:20.04:LTS linux-riscv

12 explicit affected versions

Ubuntu:22.04:LTS linux-intel-iot-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-riscv

23 explicit affected versions

Ubuntu:24.04:LTS linux-raspi-realtime

1 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

related USN-3358-1
related USN-3359-1
related USN-3360-2

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2014-9900

The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28803952 and Qualcomm internal bug CR570754.

View original source

05 / REFERENCES

Further evidence