CVE-2015-8575: The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an addre...

Security readout for executives and security teams

CVE-2015-8575 is a Linux kernel information leak in the Bluetooth SCO socket code. A local user or local application could cause kernel memory data to be exposed, potentially weakening kernel address randomization protections. This is not described as remote code execution in the provided sources. Exposure is most relevant on Linux systems running affected pre-4.3.4 kernels where local users or local applications can interact with Bluetooth SCO sockets. Multi-user systems, developer workstations, and devices running untrusted local code deserve priority review. Treat this as a moderate local-privilege exposure issue. It is unlikely to be the top emergency unless affected systems allow untrusted local code, but it should be remediated through normal kernel patching and unsupported-kernel retirement. Mitigation focus: Inventory Linux kernel versions across affected fleets.; Apply vendor kernel updates from the relevant Linux distribution advisory.; Upgrade affected kernels to a fixed release where vendor updates are unavailable..

Prepared

Jun 13, 2026, 21:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.