CVE-2015-8950: arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and o...

Security readout for executives and security teams

This is an older Linux kernel memory disclosure bug. On affected ARM64 kernels, a local user could cause some kernel memory to be exposed through a DMA mapping path. It is not described as remote code execution, and the provided sources do not show active exploitation. Most likely exposure is legacy ARM64 Linux or Android-derived kernels before 4.0.3, especially vendor kernels using ION or DMA mmap paths. The bundle does not identify specific device models, distributions, or supported product versions. Treat this as a legacy platform hygiene issue unless affected devices are still in production. It can expose kernel memory to a local attacker, so prioritize remediation where shared devices, mobile fleets, or embedded systems remain unsupported. Mitigation focus: Upgrade to Linux 4.0.3 or later, or a vendor kernel containing the fix.; Verify Android devices include the October 2016 security bulletin patch level or vendor equivalent.; For vendor kernels, confirm the upstream fix or documented backport is present..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.