SecuritySpace - CVE-2015-8944

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-8944

Description: The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-8944
BugTraq ID: 92222
http://www.securityfocus.com/bid/92222
http://www.openwall.com/lists/kernel-hardening/2016/04/06/22

CVE ID:	CVE-2015-8944
Description:	The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8944 BugTraq ID: 92222 http://www.securityfocus.com/bid/92222 http://www.openwall.com/lists/kernel-hardening/2016/04/06/22