CVE-2015-5157

N/A
Published: August 31, 2015 at 10:00 AM UTC
Updated: June 17, 2026 at 12:28 AM UTC
6 products affected across 2 vendorsLinux KernelEnterprise Linux DesktopEnterprise Linux Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.6%

Description

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 3.12.473.13 ≤ v < 3.14.543.15 ≤ v < 3.16.353.17 ≤ v < 3.18.223.19 ≤ v < 4.1.6
Affected range stops below 3.12.47, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.14.54, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.16.35, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.18.22, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.1.6, so it looks safe — our inference, not a vendor statement

References (22)

Vendor Advisoryx_refsource_SUSEThird Party AdvisoryVDB Entry
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html
Vendor Advisoryx_refsource_SUSEThird Party AdvisoryVDB Entry
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html
Vendor Advisoryx_refsource_SUSEThird Party AdvisoryVDB Entry
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html
Vendor Advisoryx_refsource_SUSEThird Party AdvisoryVDB Entry
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html
Vendor Advisoryx_refsource_SUSEThird Party AdvisoryVDB Entry
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html
Vendor Advisoryx_refsource_REDHATThird Party AdvisoryVDB Entry
http://rhn.redhat.com/errata/RHSA-2016-0185.html
Vendor Advisoryx_refsource_REDHATThird Party AdvisoryVDB Entry
http://rhn.redhat.com/errata/RHSA-2016-0212.html

CVSS

Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card