CVE-2015-5706: Use-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x and 4.x befo...

Security readout for executives and security teams

CVE-2015-5706 is an old Linux kernel flaw where a local user could trigger memory misuse during temporary-file path handling. The documented impact is denial of service, with “possibly unspecified other impact.” Systems running affected 3.x or early 4.x kernels are the concern. Exposure is most likely on legacy Linux hosts, appliances, containers hosts, or Android-derived systems running vulnerable kernels. A local account or local code execution appears required based on the CVE description. Address during legacy kernel remediation, with higher priority for shared servers and platforms running untrusted workloads. There is no source-backed evidence of active exploitation, but kernel denial-of-service risk can affect availability. Mitigation focus: Upgrade affected Linux kernels using vendor-supported security updates.; Confirm the running kernel includes the upstream fix for CVE-2015-5706.; Prioritize multi-user systems and hosts where untrusted code can run locally..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.