CVE-2015-8944

The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts.

• CWE-200

• http://source.android.com/security/bulletin/2016-08-01.htmlVendor Advisory
• http://www.openwall.com/lists/kernel-hardening/2016/04/06/22Mailing List, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/92222
• https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=e758417e7c31b975c862aa55d0ceef28f3cc9104Issue Tracking, Patch
• http://source.android.com/security/bulletin/2016-08-01.htmlVendor Advisory
• http://www.openwall.com/lists/kernel-hardening/2016/04/06/22Mailing List, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/92222
• https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=e758417e7c31b975c862aa55d0ceef28f3cc9104Issue Tracking, Patch

Published

Aug 6, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8938The MSM camera driver in the Qualcomm components in Android …
• CVE-2015-8939drivers/video/msm/mdp4_util.c in the Qualcomm components in …
• CVE-2015-8940Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qua…
• CVE-2015-8941drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c …
• CVE-2015-8942drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in …
• CVE-2015-8943drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm compo…
• CVE-2015-8945openshift-node in OpenShift Origin 1.1.6 and earlier imprope…
• CVE-2015-8946ecryptfs-setup-swap in eCryptfs before 111 does not prevent …
• CVE-2015-8947hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows r…
• CVE-2015-8948idn in GNU libidn before 1.33 might allow remote attackers t…
• CVE-2015-8949Use-after-free vulnerability in the my_login function in DBD…
• CVE-2015-8950arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3…