arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing, which allows local users to gain privileges by triggering an NMI within a certain instruction window.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 31, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade crash-docUpgrade crash-kmp-xenUpgrade hdjmod-kmp-paeUpgrade crash-debugsourceUpgrade kernel-debug-baseUpgrade kernel-xen-base-debuginfoUpgrade vhba-kmp-defaultUpgrade bbswitch-debugsourceUpgrade kernel-ec2-develUpgrade kernel-desktop-base-debuginfoUpgrade bbswitch-kmp-xenUpgrade vhba-kmp-xenUpgrade kernel-default-baseUpgrade cloop-kmp-defaultUpgrade kernel-desktop-baseUpgrade cloop-kmp-xenUpgrade cloop-kmp-paeUpgrade kernel-obs-qa-xenUpgrade kernel-ec2-baseUpgrade ipset-kmp-desktopUpgrade crash-gcoreUpgrade kernel-defaultUpgrade hdjmod-kmp-desktopUpgrade crash-eppic-debuginfoUpgrade cloop-kmp-desktopUpgrade bbswitch-kmp-default-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-desktopUpgrade ipset-kmp-xen-debuginfoUpgrade xtables-addons-kmp-xen-debuginfoUpgrade xen-kmp-desktopUpgrade kernel-obs-qaUpgrade kernel-desktop-develUpgrade libipset3Upgrade kernel-pae-base-debuginfoUpgrade hdjmod-kmp-default-debuginfoUpgrade kernel-pae-baseUpgrade vhba-kmp-paeUpgrade ipset-kmp-defaultUpgrade bbswitchUpgrade crash-gcore-debuginfoUpgrade kernel-default-debuginfoUpgrade kernel-xen-debuginfoUpgrade vhba-kmp-pae-debuginfoUpgrade vhba-kmpUpgrade bbswitch-kmp-defaultUpgrade cloop-kmp-xen-debuginfoUpgrade pcfclock-kmp-default-debuginfoUpgrade xen-libsUpgrade xen-debugsourceUpgrade kernel-xen-develUpgrade pcfclockUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade xen-libs-debuginfoUpgrade pcfclock-debuginfoUpgrade ipsetUpgrade ipset-debuginfoUpgrade cloop-kmp-pae-debuginfoUpgrade cloop-kmp-desktop-debuginfoUpgrade crash-kmp-paeUpgrade kernel-debug-base-debuginfoUpgrade xtables-addons-kmp-defaultUpgrade kernel-xen-baseUpgrade cloop-kmp-default-debuginfoUpgrade xen-libs-32bitUpgrade pcfclock-kmp-desktopUpgrade kernel-ec2-debugsourceUpgrade kernel-ec2-debuginfoUpgrade ipset-kmp-default-debuginfoUpgrade hdjmod-kmp-xenUpgrade crash-kmp-desktopUpgrade hdjmod-kmp-desktop-debuginfoUpgrade xen-toolsUpgrade bbswitch-kmp-xen-debuginfoUpgrade ipset-kmp-pae-debuginfoUpgrade vhba-kmp-debugsourceUpgrade crash-kmp-default-debuginfoUpgrade kernel-develUpgrade xtables-addons-debugsourceUpgrade pcfclock-kmp-defaultUpgrade cloopUpgrade kernel-xenUpgrade xtables-addons-kmp-default-debuginfoUpgrade kernel-paeUpgrade kernel-default-develUpgrade xen-tools-domU-debuginfoUpgrade kernel-sourceUpgrade crash-eppicUpgrade xen-develUpgrade vhba-kmp-desktop-debuginfoUpgrade kernel-ec2Upgrade kernel-symsUpgrade xen-kmp-desktop-debuginfoUpgrade vhba-kmp-default-debuginfoUpgrade hdjmod-kmp-xen-debuginfoUpgrade xen-tools-domUUpgrade xtables-addons-kmp-pae-debuginfoUpgrade hdjmod-kmp-pae-debuginfoUpgrade hdjmod-debugsourceUpgrade crashUpgrade ipset-kmp-xenUpgrade kernel-obs-build-debugsourceUpgrade pcfclock-kmp-paeUpgrade bbswitch-kmp-desktopUpgrade ipset-debugsourceUpgrade kernel-default-base-debuginfoUpgrade kernel-source-vanillaUpgrade kernel-debug-debugsourceUpgrade kernel-desktop-debuginfoUpgrade ipset-kmp-paeUpgrade crash-develUpgrade kernel-pae-develUpgrade kernel-default-debugsourceUpgrade xen-tools-debuginfoUpgrade xtables-addons-debuginfoUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade bbswitch-kmp-desktop-debuginfoUpgrade crash-kmp-defaultUpgrade xtables-addons-kmp-paeUpgrade kernel-vanilla-debugsourceUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade pcfclock-kmp-desktop-debuginfoUpgrade vhba-kmp-desktopUpgrade pcfclock-kmp-pae-debuginfoUpgrade crash-kmp-pae-debuginfoUpgrade crash-kmp-xen-debuginfoUpgrade xtables-addons-kmp-desktopUpgrade xenUpgrade xen-kmp-default-debuginfoUpgrade xtables-addonsUpgrade crash-debuginfoUpgrade pcfclock-debugsourceUpgrade kernel-ec2-base-debuginfoUpgrade kernel-vanilla-develUpgrade hdjmod-kmp-defaultUpgrade xen-libs-debuginfo-32bitUpgrade ipset-kmp-desktop-debuginfoUpgrade kernel-pae-debugsourceUpgrade xtables-addons-kmp-xenUpgrade crash-kmp-desktop-debuginfoUpgrade kernel-pae-debuginfoUpgrade hdjmodUpgrade libipset3-debuginfoUpgrade vhba-kmp-xen-debuginfoUpgrade bbswitch-kmp-paeUpgrade kernel-xen-debugsourceUpgrade xtables-addons-kmp-desktop-debuginfoUpgrade cloop-debuginfoUpgrade bbswitch-kmp-pae-debuginfoUpgrade cloop-debugsourceUpgrade kernel-desktop-debugsourceUpgrade kernel-debug-devel-debuginfoUpgrade kernel-vanillaUpgrade ipset-develUpgrade kernel-debug | Dec 18, 2015 | Aug 14, 2015 |
| Ubuntu | — | Upgrade linux-image-3.16.0-45-lowlatencyUpgrade linux-image-3.19.0-25-powerpc-e500mcUpgrade linux-image-3.13.0-59-powerpc64-smpUpgrade linux-image-3.13.0-61-powerpc-smpUpgrade linux-image-3.13.0-61-powerpc-e500mcUpgrade linux-image-3.16.0-45-powerpc64-smpUpgrade linux-image-3.13.0-61-generic-lpaeUpgrade linux-image-3.13.0-61-powerpc-e500Upgrade linux-image-3.13.0-59-generic-lpaeUpgrade linux-image-3.13.0-61-powerpc64-embUpgrade linux-image-3.19.0-25-generic-lpaeUpgrade linux-image-3.13.0-61-genericUpgrade linux-image-3.13.0-61-lowlatencyUpgrade linux-image-3.19.0-25-lowlatencyUpgrade linux-image-3.13.0-59-powerpc-e500mcUpgrade linux-image-3.13.0-59-lowlatencyUpgrade linux-image-3.13.0-61-powerpc64-smpUpgrade linux-image-3.16.0-45-powerpc64-embUpgrade linux-image-3.13.0-59-powerpc-e500Upgrade linux-image-3.19.0-25-genericUpgrade linux-image-3.16.0-45-generic-lpaeUpgrade linux-image-3.16.0-45-genericUpgrade linux-image-3.13.0-59-genericUpgrade linux-image-3.19.0-25-powerpc64-smpUpgrade linux-image-3.13.0-59-powerpc64-embUpgrade linux-image-3.13.0-59-powerpc-smpUpgrade linux-image-3.19.0-25-powerpc-smpUpgrade linux-image-3.16.0-45-powerpc-e500mcUpgrade linux-image-3.19.0-25-powerpc64-embUpgrade linux-image-3.16.0-45-powerpc-smp | Nov 8, 2024 | Aug 31, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub