CVE-2015-8967: arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permis...

Security readout for executives and security teams

This is a local privilege-escalation flaw in ARM64 Linux kernels before 4.0. A user or process already running on the system could bypass strict page-permission protections, alter sensitive kernel structures, and gain higher privileges. The sources do not show remote exposure or confirmed active exploitation. Exposure is most likely on ARM64 systems running Linux kernels before 4.0, or vendor-maintained Android/Linux kernel branches missing the referenced upstream fix. Risk is highest where untrusted users, apps, containers, or services can execute local code. Treat this as high priority for older ARM64 Linux or Android-derived platforms that run untrusted local code. It is less urgent for systems where kernel versions are fixed or local code execution is tightly controlled. Missing CVSS and exploitation data limit precision. Mitigation focus: Check whether ARM64 kernels include upstream commit c623b33b4e9599c6ac5076f7db7369eb9869aa04.; Upgrade affected Linux kernels to 4.0 or vendor-supported fixed builds.; For Android-derived systems, review the December 2016 Android security bulletin and vendor updates..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.