NVD

Id
28941  
Name
CVE-2015-8950  
Description
arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-10-10  
Modified Date
2016-11-28  
Seq
2015-8950  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152562 28941 CVE-2015-8950 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6829e274a623187c24f7cfc0e3d35f25d087fcc5  View
152563 28941 CVE-2015-8950 http://source.android.com/security/bulletin/2016-10-01.html  View
152564 28941 CVE-2015-8950 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3  View
152565 28941 CVE-2015-8950 93318  View
152566 28941 CVE-2015-8950 https://github.com/torvalds/linux/commit/6829e274a623187c24f7cfc0e3d35f25d087fcc5  View
152567 28941 CVE-2015-8950 https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=6e2c437a2d0a85d90d3db85a7471f99764f7bbf8  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11955 JVNDB-2015-007276 Android などの製品の ION サブシステムで使用される Linux Kernel における重要な情報を取得される脆弱性 Android およびその他の製品の ION サブシステムで使用される Linux Kernel の arch/arm64/mm/dma-mapping.c は、特定のデータ構造を初期化しないため、重要な情報を取得される脆弱性が存在します。 CVE-2015-8950 86175 CVE-2015-8950 28941 4.3 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007276.html 2015-05-13 2016-10-14 View