CVE-2015-4004

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.0.5

Description The issue allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service via a crafted packet. This is due to the OZWPAN driver relying on an untrusted length field during packet parsing, leading to an out-of-bounds read and potential system crash.

Recommendations For Linux kernel versions through 4.0.5, update to a version later than 4.0.5 to resolve the issue. As a temporary workaround, consider restricting access to the OZWPAN driver to minimize the risk of exploitation.