CVE-2015-2686: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom system calls, which allows local users to gain privileges by leveraging a subsystem that uses the copy_from_iter function in the iov_iter interface, as demonstrated by the Bluetooth subsystem.

Affected products

• Linux Linux Kernel: version 3.19 only; version 3.19.1 only; version 3.19.2 only

Published 2016-05-02. Last modified 2026-06-17.