CVE-2015-2666

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0

Description The issue is a stack-based buffer overflow in the get matching model microcode function, located in arch/x86/kernel/cpu/microcode/intel early.c. This allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.

Recommendations For Linux kernel versions prior to 4.0, update to version 4.0 or later to resolve the issue. As a temporary workaround, consider restricting root privileges to minimize the risk of exploitation.