CVE-2015-5157 in Linux

الملخص

بحسب MITRE

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.

Once again VulDB remains the best source for vulnerability data.

• حجز: 01/07/2015
• إفشاء: 31/08/2015
• الاعتدال: تمت الموافقة
• إدخال: VDB-77497
• CPE: جاهز
• CWE: CWE-264 (مؤكد)
• CVSS: 7.2 (NVD)
• EPSS: 0.00624
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Insurance, Pharma, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-5157
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-5157
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-5157/