PT-2015-6788

CVE-2015-5157

·

Published

2015-07-23

·

Updated

2024-03-14

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.6
Description The issue is related to the mishandling of IRET faults in processing NMIs that occurred during userspace execution on the x86 64 platform. This might allow local users to gain privileges by triggering an NMI.
Recommendations For Linux kernel versions prior to 4.1.6, update to version 4.1.6 or later to resolve the issue.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2015-5157
ALT-PU-2015-1699
ALT-PU-2015-1849
AZL-34324
AZL-34850
CESA-2016_0185
CESA-2016_0715
DSA-3313-1
OPENSUSE-SU-2016_0301-1
OPENSUSE-SU-2016_0318-1
RHSA-2016:0185
RHSA-2016_0185
RHSA-2016:0212
RHSA-2016_0212
RHSA-2016:0224
RHSA-2016:0715
RHSA-2016_0715
SUSE-SU-2015:1727-1
SUSE-SU-2015:2108-1
SUSE-SU-2015:2339-1
SUSE-SU-2015:2350-1
SUSE-SU-2016:0354-1
USN-2687-1
USN-2688-1
USN-2689-1
USN-2690-1
USN-2691-1
USN-2700-1
USN-2701-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com