CVE-2015-8955: arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain...

Security readout for executives and security teams

CVE-2015-8955 is a Linux kernel flaw on arm64 systems before kernel 4.1. A local user could potentially gain higher privileges or crash the system. This is most relevant to older arm64 servers, embedded devices, and Android-derived environments that may not have received vendor kernel backports. Exposure is limited to arm64 platforms running Linux kernels before 4.1 or vendor kernels missing the referenced backport. Systems on supported, regularly patched kernels are less likely exposed. The source bundle does not provide exact distro, device, or Android build ranges. Prioritize remediation where old arm64 kernels support multi-user access, hosted workloads, or sensitive services. For modern managed systems, treat this as a legacy exposure check rather than an emergency unless patch status is unknown. Mitigation focus: Upgrade affected arm64 kernels to a fixed vendor-supported release.; Confirm vendor kernels include the referenced upstream backport.; Review the Android October 2016 bulletin for Android-derived fleets..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.