CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call.

• CWE-200

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6829e274a623187c24f7cfc0e3d35f25d087fcc5Issue Tracking, Patch
• http://source.android.com/security/bulletin/2016-10-01.htmlVendor Advisory
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3Release Notes
• http://www.securityfocus.com/bid/93318
• https://github.com/torvalds/linux/commit/6829e274a623187c24f7cfc0e3d35f25d087fcc5Issue Tracking, Patch
• https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=6e2c437a2d0a85d90d3db85a7471f99764f7bbf8Issue Tracking, Patch
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6829e274a623187c24f7cfc0e3d35f25d087fcc5Issue Tracking, Patch
• http://source.android.com/security/bulletin/2016-10-01.htmlVendor Advisory
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3Release Notes
• http://www.securityfocus.com/bid/93318
• https://github.com/torvalds/linux/commit/6829e274a623187c24f7cfc0e3d35f25d087fcc5Issue Tracking, Patch
• https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=6e2c437a2d0a85d90d3db85a7471f99764f7bbf8Issue Tracking, Patch

Published

Oct 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8944The ioresources_init function in kernel/resource.c in the Li…
• CVE-2015-8945openshift-node in OpenShift Origin 1.1.6 and earlier imprope…
• CVE-2015-8946ecryptfs-setup-swap in eCryptfs before 111 does not prevent …
• CVE-2015-8947hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows r…
• CVE-2015-8948idn in GNU libidn before 1.33 might allow remote attackers t…
• CVE-2015-8949Use-after-free vulnerability in the my_login function in DBD…
• CVE-2015-8951Multiple use-after-free vulnerabilities in sound/soc/msm/qds…
• CVE-2015-8952The mbcache feature in the ext2 and ext4 filesystem implemen…
• CVE-2015-8953fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses…
• CVE-2015-8954The MemcmpLowercase function in Suricata before 2.0.6 improp…
• CVE-2015-8955arch/arm64/kernel/perf_event.c in the Linux kernel before 4.…7.3
• CVE-2015-8956The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c…