CVE-2015-5157 in Linux

Sumário

de MITRE

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 01/07/2015
• Divulgação: 31/08/2015
• Moderação: aceite
• Entrada: VDB-77497
• CPE: pronto
• CWE: CWE-264 (confirmado)
• CVSS: 7.2 (NVD)
• EPSS: 0.00624
• KEV: não
• Atividades: muito baixo
• Sector: Lawfirm, Industry, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-5157
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-5157
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-5157/