CVE-2015-8944: Infoleak

Q: What is CVE-2015-8944?

CVE-2015-8944 is a vulnerability in the Linux kernel through version 4.7 that allows local users to obtain sensitive information by reading the /proc/iomem file.

Q: Which devices are affected by CVE-2015-8944?

CVE-2015-8944 affects Nexus 6 and Nexus 7 (2013) devices running Android before 2016-08-05.

Q: How can a local user exploit CVE-2015-8944?

A local user can exploit CVE-2015-8944 by reading the /proc/iomem file on the affected device.

Q: What can an attacker gain from exploiting CVE-2015-8944?

By exploiting CVE-2015-8944, an attacker can obtain sensitive information from the /proc/iomem file.

Q: How can I mitigate CVE-2015-8944?

To mitigate CVE-2015-8944, it is recommended to update the Linux kernel to version 4.7 or later.

Published Aug 1, 2016

Updated

Last updated 29 November 2024

Other sources

The ioresourcesinit function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts.

— Launchpad

Affected Software

29 affected componentsFixes available

Google Android<=6.0.1

Linux Linux kernel<=4.7

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1

Google Android

ubuntu/linux<3.13.0-125.174

3.13.0-125.174

ubuntu/linux-lts-xenial<4.4.0-87.110~14.04.1

4.4.0-87.110~14.04.1

ubuntu/linux<4.4.0-87.110

4.4.0-87.110

ubuntu/linux-aws<4.4.0-1026.35

4.4.0-1026.35

ubuntu/linux-gke<4.4.0-1022.22

4.4.0-1022.22

ubuntu/linux-raspi2<4.4.0-1065.73

4.4.0-1065.73

ubuntu/linux-snapdragon<4.4.0-1067.72

4.4.0-1067.72

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-gke*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-raspi-realtime*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 3.13.0-125.174
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-87.110~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-87.110
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1026.35
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 4.4.0-1022.22
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.4.0-1065.73
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.4.0-1067.72

Event History

Aug 1, 2016

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Aug 6, 2016

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is CVE-2015-8944?

CVE-2015-8944 is a vulnerability in the Linux kernel through version 4.7 that allows local users to obtain sensitive information by reading the /proc/iomem file.

Which devices are affected by CVE-2015-8944?

CVE-2015-8944 affects Nexus 6 and Nexus 7 (2013) devices running Android before 2016-08-05.

How can a local user exploit CVE-2015-8944?

A local user can exploit CVE-2015-8944 by reading the /proc/iomem file on the affected device.

What can an attacker gain from exploiting CVE-2015-8944?

By exploiting CVE-2015-8944, an attacker can obtain sensitive information from the /proc/iomem file.

How can I mitigate CVE-2015-8944?

To mitigate CVE-2015-8944, it is recommended to update the Linux kernel to version 4.7 or later.

CVE-2015-8944: Infoleak

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is CVE-2015-8944?

Which devices are affected by CVE-2015-8944?

How can a local user exploit CVE-2015-8944?

What can an attacker gain from exploiting CVE-2015-8944?

How can I mitigate CVE-2015-8944?

Company

Resources

Contact