#VU92475 Information exposure in Linux kernel - CVE-2015-8575

Vulnerability identifier: #VU92475

Vulnerability risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2015-8575

CWE-ID: CWE-200

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local non-authenticated attacker to gain access to sensitive information.

The vulnerability exists due to information exposure error within the sco_sock_bind() function in net/bluetooth/sco.c. A local non-authenticated attacker can gain access to sensitive information.

Mitigation
Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5233252fce714053f0151680933571a2da9cbfb4
https://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html
https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
https://www.debian.org/security/2016/dsa-3434
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4
https://www.openwall.com/lists/oss-security/2015/12/16/3
https://www.securityfocus.com/bid/79724
https://www.ubuntu.com/usn/USN-2886-1
https://www.ubuntu.com/usn/USN-2888-1
https://www.ubuntu.com/usn/USN-2890-1
https://www.ubuntu.com/usn/USN-2890-2
https://www.ubuntu.com/usn/USN-2890-3
https://bugzilla.redhat.com/show_bug.cgi?id=1292840
https://github.com/torvalds/linux/commit/5233252fce714053f0151680933571a2da9cbfb4

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.