Unrated severityNVD Advisory· Published Jun 7, 2015· Updated Jun 17, 2026

CVE-2015-4004

Description

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Canonical/Ubuntu Linux3 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=3.4,<4.3
- (no CPE)range: <=4.0.5

Patches

Vulnerability mechanics

References

lkml.org/lkml/2015/5/13/739nvdExploitVendor Advisory
openwall.com/lists/oss-security/2015/06/05/7nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/74669nvdThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-2989-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-2998-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-3000-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-3001-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-3002-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-3003-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-3004-1nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000