CVE-2015-8964: The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local u...

Security readout for executives and security teams

CVE-2015-8964 is a Linux kernel information disclosure issue in the tty line discipline handling code. A local user could read sensitive data from kernel memory through a tty data structure. It is not presented as remotely exploitable, and the bundle does not show active exploitation. Exposure is most likely on systems running Linux kernels before 4.5, including Android-derived kernels if not vendor-patched. The bundle does not identify specific distributions, device models, or package versions. Treat as a patch-management priority, not an emergency remote-code-execution event. Focus first on shared or exposed multi-user environments and unsupported kernels, because the disclosed impact is sensitive kernel memory exposure by local users. Mitigation focus: Upgrade to Linux kernel 4.5 or a vendor-patched kernel containing the fix.; Review Android and Linux vendor advisories for applicable backported patches.; Prioritize shared systems where untrusted local users have access..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.