NVD

Id
24690  
Name
CVE-2015-2672  
Description
The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstr_replacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service (panic) by triggering a fault, as demonstrated by an unaligned memory operand or a non-canonical address memory operand.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-05-02  
Modified Date
2016-05-06  
Seq
2015-2672  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
129965 24690 CVE-2015-2672 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06c8173eb92bbfc03a0fe8bb64315857d0badd06  View
129966 24690 CVE-2015-2672 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2  View
129967 24690 CVE-2015-2672 [oss-security] 20150321 Re: CVE Request: Linux kernel unprivileged denial-of-service due to mis-protected xsave/xrstor instructions.  View
129968 24690 CVE-2015-2672 https://bugzilla.redhat.com/show_bug.cgi?id=1204729  View
129969 24690 CVE-2015-2672 https://github.com/torvalds/linux/commit/06c8173eb92bbfc03a0fe8bb64315857d0badd06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11805 JVNDB-2015-007125 Linux Kernel の arch/x86/include/asm/xsave.h の xsave/xrstor の実装におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の arch/x86/include/asm/xsave.h の xsave/xrstor の実装は、特定の .altinstr_replacement ポインタを作成し、その結果、命令フォールト (instruction fault) に対する保護を提供しないため、サービス運用妨害 (パニック) 状態にされる脆弱性が存在します。 CVE-2015-2672 79897 CVE-2015-2672 24690 4.9 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007125.html 2015-03-18 2016-05-11 View