CVE-2015-4002: drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure t...

Security readout for executives and security teams

A flaw in the Linux kernel's staging OZWPAN driver could let a remote attacker send a malformed packet that crashes the system or possibly runs code. The evidence points to old kernels through 4.0.5 and vendor updates in 2015. Impact is highest where the ozwpan driver is present and reachable. Exposure appears limited to systems running Linux kernels through 4.0.5 with the staging OZWPAN driver present and reachable by relevant remote packet input. The bundle does not identify broad default exposure, specific distributions beyond vendor advisories, or affected configurations. Prioritize this for legacy Linux and embedded asset review rather than broad emergency response. The potential kernel crash and possible code execution are severe, but available evidence suggests exposure depends on a niche staging driver and old kernel versions. Mitigation focus: Confirm whether the ozwpan driver is present, enabled, or loadable on affected systems.; Apply vendor kernel updates from relevant distributions, including Ubuntu or openSUSE guidance where applicable.; Move systems off Linux kernels through 4.0.5 where the driver is available..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.