Andrew Lutomirski

The issue is related to the sys amd64 IRET Handler in the kernel, which is associated with insufficient access control. This can be exploited by a local attacker to gain privileges or cause a denial of service, resulting in a kernel panic.

The issue allows local users to gain privileges by triggering an NMI within a certain instruction window due to improper reliance on espfix64 during nested NMI processing in arch/x86/entry/entry 64.S on the x86 64 platform.