CVE-2015-8944: Infoleak
Last updated 29 November 2024
Other sources
The ioresourcesinit function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2015-8944?
CVE-2015-8944 is a vulnerability in the Linux kernel through version 4.7 that allows local users to obtain sensitive information by reading the /proc/iomem file.
Which devices are affected by CVE-2015-8944?
CVE-2015-8944 affects Nexus 6 and Nexus 7 (2013) devices running Android before 2016-08-05.
How can a local user exploit CVE-2015-8944?
A local user can exploit CVE-2015-8944 by reading the /proc/iomem file on the affected device.
What can an attacker gain from exploiting CVE-2015-8944?
By exploiting CVE-2015-8944, an attacker can obtain sensitive information from the /proc/iomem file.
How can I mitigate CVE-2015-8944?
To mitigate CVE-2015-8944, it is recommended to update the Linux kernel to version 4.7 or later.