NVD

Id
26405  
Name
CVE-2015-5157  
Description
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-08-31  
Modified Date
2016-12-21  
Seq
2015-5157  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139567 26405 CVE-2015-5157 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a  View
139568 26405 CVE-2015-5157 SUSE-SU-2015:1727  View
139569 26405 CVE-2015-5157 SUSE-SU-2015:2108  View
139570 26405 CVE-2015-5157 SUSE-SU-2015:2339  View
139571 26405 CVE-2015-5157 SUSE-SU-2015:2350  View
139572 26405 CVE-2015-5157 SUSE-SU-2016:0354  View
139573 26405 CVE-2015-5157 RHSA-2016:0185  View
139574 26405 CVE-2015-5157 RHSA-2016:0212  View
139575 26405 CVE-2015-5157 RHSA-2016:0224  View
139576 26405 CVE-2015-5157 RHSA-2016:0715  View
139577 26405 CVE-2015-5157 DSA-3313  View
139578 26405 CVE-2015-5157 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6  View
139579 26405 CVE-2015-5157 [oss-security] 20150722 Linux x86_64 NMI security issues  View
139580 26405 CVE-2015-5157 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
139581 26405 CVE-2015-5157 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
139582 26405 CVE-2015-5157 76005  View
139583 26405 CVE-2015-5157 USN-2687-1  View
139584 26405 CVE-2015-5157 USN-2688-1  View
139585 26405 CVE-2015-5157 USN-2689-1  View
139586 26405 CVE-2015-5157 USN-2690-1  View
139587 26405 CVE-2015-5157 USN-2691-1  View
139588 26405 CVE-2015-5157 https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9196 JVNDB-2015-004516 x86_64 プラットフォーム上で稼動する Linux Kernel の arch/x86/entry/entry_64.S における権限を取得される脆弱性 x86_64 プラットフォーム上で稼動する Linux Kernel の arch/x86/entry/entry_64.S は、ユーザ空間の実行中に発生する NMI 処理の際の IRET 障害を適切に処理しないため、 権限を取得される脆弱性が存在します。 CVE-2015-5157 82382 CVE-2015-5157 26405 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004516.html 2015-08-16 2015-09-01 View