PT-2015-7636 · Linux+3 · Linux Kernel+3

Adam Mariš · Published 2015-10-15 · Updated 2026-05-26 · CVE-2015-7837

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description The issue allows local users to bypass intended securelevel/secureboot restrictions. This is achieved by leveraging improper handling of the secure boot flag across kexec reboot when the system is booted with UEFI Secure Boot enabled.

Recommendations For Linux kernel versions prior to the fixed version, consider disabling UEFI Secure Boot as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

CESA-2015_2152

CVE-2015-7837

RHSA-2015:2152

RHSA-2015:2411

RHSA-2015_2152

RHSA-2015_2411

USN-3405-1

USN-3405-2

Affected Products

Centos

Linux Kernel

Red Hat

Ubuntu

References · 26

• https://ubuntu.com/security/CVE-2017-7495 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-11176 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-7837 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3405-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-7837 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-2152.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-7837 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7541 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2152.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-3405-2 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2411.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-3405-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2015-7837 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-7837 · Security Note
• https://linux.oracle.com/errata/ELSA-2019-4316.html · Vendor Advisory