PT-2015-6788 · Linux+5 · Linux Kernel+5

Andy Lutomirski

+1

·

Publicado

2015-07-23

·

Atualizado

2024-03-14

·

CVE-2015-5157

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.6
Description The issue is related to the mishandling of IRET faults in processing NMIs that occurred during userspace execution on the x86 64 platform. This might allow local users to gain privileges by triggering an NMI.
Recommendations For Linux kernel versions prior to 4.1.6, update to version 4.1.6 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2015-1699
ALT-PU-2015-1849
AZL-34324
AZL-34850
CESA-2016_0185
CESA-2016_0715
CVE-2015-5157
DSA-3313-1
OPENSUSE-SU-2016_0301-1
OPENSUSE-SU-2016_0318-1
RHSA-2016:0185
RHSA-2016:0212
RHSA-2016:0224
RHSA-2016:0715
RHSA-2016_0185
RHSA-2016_0212
RHSA-2016_0715
SUSE-SU-2015:1727-1
SUSE-SU-2015:2108-1
SUSE-SU-2015:2339-1
SUSE-SU-2015:2350-1
SUSE-SU-2016:0354-1
USN-2687-1
USN-2688-1
USN-2689-1
USN-2690-1
USN-2691-1
USN-2700-1
USN-2701-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu