PT-2016-2614 · Linux+3 · Linux Kernel+3

Published 2016-08-06 · Updated 2026-03-14 · CVE-2014-9892

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.7 Android versions prior to 2016-08-05

Description The issue is related to the improper initialization of a timestamp data structure in the snd compr tstamp function. This allows attackers to obtain sensitive information via a crafted application. The problem is associated with the sound/core/compress offload.c file in the Linux kernel.

Recommendations For Linux kernel versions through 4.7, update to a version later than 4.7 to resolve the issue. For Android versions prior to 2016-08-05, update to a version released after 2016-08-05 to mitigate the risk. As a temporary workaround, consider restricting access to the snd compr tstamp function until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2016-1862

ALT-PU-2017-1330

BDU:2016-02006

CVE-2014-9892

ECHO-CECC-20CC-0BC4

Affected Products

Alt Linux

Android

Debian

Linux Kernel

References · 14

• https://osv.dev/vulnerability/DEBIAN-CVE-2014-9892 · Vendor Advisory
• http://source.android.com/security/bulletin/2016-08-01.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-9892 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-9892 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2014-9892 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-9892 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-9892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9892 · Security Note
• https://bdu.fstec.ru/vul/2016-02006 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2014-9892 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2014-9892 · Vendor Advisory
• https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=591b1f455c32206704cbcf426bb30911c260c33e · Patch
• https://cve.org/CVERecord?id=CVE-2014-9892 · Security Note
• http://securityfocus.com/bid/92222 · Note