NetSight
IP …
high7.2

CVE-2015-5157

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace exec…

Impact

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Hpc Node
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Eus
Version 6.7.z
RedhatEnterprise Linux Workstation
Version 6.0
LinuxLinux Kernel
before 3.12.47
from 3.13 before 3.14.54
from 3.15 before 3.16.35
from 3.17 before 3.18.22
from 3.19 before 4.1.6

Weakness classification

CWE-264

References