PT-2015-4535 · Linux+4 · Linux Kernel+4

Nadav Amit · Published 2015-01-23 · Updated 2023-02-13 · CVE-2015-0239

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.5

Description The issue allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction, specifically when the guest OS lacks SYSENTER MSR initialization. This occurs due to a problem in the em sysenter function in arch/x86/kvm/emulate.c.

Recommendations For Linux kernel versions prior to 3.18.5, update to version 3.18.5 or later to resolve the issue.

Exploit

Fix

DoS

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

ALT-PU-2015-1118

ALT-PU-2015-1794

CESA-2015_1272

CESA-2015_2152

CVE-2015-0239

DSA-3170-1

MGASA-2015-0210

MGASA-2015-0219

MGASA-2015-0221

RHSA-2015:1272

RHSA-2015:2152

RHSA-2015_1272

RHSA-2015_2152

USN-2513-1

USN-2514-1

USN-2515-1

USN-2516-1

USN-2516-2

USN-2516-3

USN-2517-1

USN-2518-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

References · 85

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2015/01/27/6 · Exploit
• https://github.com/torvalds/linux/commit/f3747379accba8e95d70cec0eae0582c8c182050 · Patch
• https://ubuntu.com/security/CVE-2014-9529 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8989 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-0239 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2517-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0210 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-0239 · Vendor Advisory