PT-2015-6788 · Linux+5 · Linux Kernel+5

Andy Lutomirski

+1

·

Published

2015-07-23

·

Updated

2024-03-14

·

CVE-2015-5157

CVSS v2.0

7.2

High

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.6
Description The issue is related to the mishandling of IRET faults in processing NMIs that occurred during userspace execution on the x86 64 platform. This might allow local users to gain privileges by triggering an NMI.
Recommendations For Linux kernel versions prior to 4.1.6, update to version 4.1.6 or later to resolve the issue.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2015-1699
ALT-PU-2015-1849
AZL-34324
AZL-34850
CESA-2016_0185
CESA-2016_0715
CVE-2015-5157
DSA-3313-1
OPENSUSE-SU-2016_0301-1
OPENSUSE-SU-2016_0318-1
RHSA-2016:0185
RHSA-2016:0212
RHSA-2016:0224
RHSA-2016:0715
RHSA-2016_0185
RHSA-2016_0212
RHSA-2016_0715
SUSE-SU-2015:1727-1
SUSE-SU-2015:2108-1
SUSE-SU-2015:2339-1
SUSE-SU-2015:2350-1
SUSE-SU-2016:0354-1
USN-2687-1
USN-2688-1
USN-2689-1
USN-2690-1
USN-2691-1
USN-2700-1
USN-2701-1

Affected Products

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu