VYPR
Medium severity6.1NVD Advisory· Published Oct 10, 2016· Updated May 6, 2026

CVE-2015-8956

CVE-2015-8956

Description

The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.

Affected products

2
  • cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
    Range: <=7.0
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Range: <=4.1.33

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.