Published: 31/08/2015 Updated: 14/03/2024

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 642

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Enterprise Linux Server Eus

arch/x86/entry/entry_64.S in the Linux kernel prior to 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux server eus 6.7.z
redhat enterprise linux hpc node 6.0
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation or denial of service CVE-2015-3290 Andy Lutomirski discovered that the Linux kernel does not properly handle nested NMIs A local, unprivileged user could use this flaw for privilege escalation CVE-2015-3291 Andy Lutomirski di ...

Several security issues were fixed in the kernel ...

A flaw was found in the way the Linux kernel handled IRET faults during the processing of NMIs An unprivileged, local user could use this flaw to crash the system or, potentially (although highly unlikely), escalate their privileges on the system ...

CWE-264 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6 https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a http://www.openwall.com/lists/oss-security/2015/07/22/7 http://rhn.redhat.com/errata/RHSA-2016-0715.html http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html http://www.securityfocus.com/bid/76005 http://rhn.redhat.com/errata/RHSA-2016-0212.html http://rhn.redhat.com/errata/RHSA-2016-0185.html http://rhn.redhat.com/errata/RHSA-2016-0224.html http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html http://www.ubuntu.com/usn/USN-2691-1 http://www.ubuntu.com/usn/USN-2690-1 http://www.ubuntu.com/usn/USN-2689-1 http://www.ubuntu.com/usn/USN-2688-1 http://www.ubuntu.com/usn/USN-2687-1 http://www.debian.org/security/2015/dsa-3313 https://www.debian.org/security/./dsa-3313 https://nvd.nist.gov https://usn.ubuntu.com/2690-1/https://access.redhat.com/security/cve/cve-2015-5157

CVE-2015-5157

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect