CVE-2015-8944: The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android befo...

Security readout for executives and security teams

This CVE describes overly permissive access to /proc/iomem on certain Android Nexus devices, allowing a local user to read sensitive memory resource information. The issue is information disclosure, not a remote takeover. Business urgency depends on whether any affected legacy Android devices remain in use. Exposure is most credible for legacy Android Nexus 6 and Nexus 7 (2013) devices below the 2016-08-05 Android security patch level. Broader Linux impact is uncertain because the CVE explicitly limits concern outside Android contexts. Treat this as a legacy mobile exposure cleanup item. It should not outrank actively exploited remote vulnerabilities, but unmanaged old Android devices can leak low-level system information that may assist further attacks. Mitigation focus: Identify any Nexus 6 or Nexus 7 (2013) devices still in use.; Apply Android vendor updates covering the 2016-08-05 patch level where available.; Retire or isolate devices that cannot receive the relevant Android security update..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.