CVE-2015-8956: Null Pointer Dereference
The rfcommsockbind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 4.2Patch 951b6a0717db97ce420547222647bcc40bf1eacd
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8956?
CVE-2015-8956 has been classified as a medium to high severity vulnerability due to its potential for information disclosure and denial of service.
How do I fix CVE-2015-8956?
To mitigate CVE-2015-8956, upgrade your Linux kernel to version 4.2 or later.
What affected software versions are associated with CVE-2015-8956?
CVE-2015-8956 affects Linux kernel versions up to 4.1.33 and Google Android versions up to 7.0.
Who can exploit CVE-2015-8956?
CVE-2015-8956 can be exploited by local users who can interact with Bluetooth RFCOMM sockets.
What types of impacts can result from CVE-2015-8956?
CVE-2015-8956 can lead to the disclosure of sensitive information or cause disruption through denial of service via a NULL pointer dereference.