arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing, which allows local users to gain privileges by triggering an NMI within a certain instruction window.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 31, 2015 |
| Suse | — | Upgrade ipset-kmp-pae-debuginfoUpgrade kernel-ec2-debugsourceUpgrade hdjmod-kmp-default-debuginfoUpgrade kernel-xen-baseUpgrade bbswitch-kmp-xen-debuginfoUpgrade ipset-kmp-default-debuginfoUpgrade hdjmod-kmp-desktop-debuginfoUpgrade kernel-desktop-develUpgrade kernel-vanilla-debuginfoUpgrade xtables-addons-kmp-xen-debuginfoUpgrade cloop-kmp-defaultUpgrade kernel-desktopUpgrade cloop-kmp-desktop-debuginfoUpgrade vhba-kmp-paeUpgrade kernel-obs-buildUpgrade crash-debugsourceUpgrade kernel-ec2-develUpgrade pcfclockUpgrade kernel-obs-qa-xenUpgrade bbswitch-kmp-xenUpgrade kernel-default-baseUpgrade libipset3Upgrade kernel-defaultUpgrade xen-debugsourceUpgrade ipset-kmp-desktopUpgrade xen-toolsUpgrade cloop-kmp-xen-debuginfoUpgrade kernel-obs-qaUpgrade kernel-desktop-baseUpgrade bbswitch-kmp-defaultUpgrade kernel-pae-base-debuginfoUpgrade vhba-kmp-xenUpgrade cloop-kmp-default-debuginfoUpgrade kernel-develUpgrade kernel-default-debuginfoUpgrade hdjmod-kmp-paeUpgrade hdjmod-kmp-xenUpgrade kernel-xen-base-debuginfoUpgrade kernel-docsUpgrade ipset-kmp-defaultUpgrade ipset-kmp-xen-debuginfoUpgrade crash-eppic-debuginfoUpgrade kernel-macrosUpgrade hdjmod-kmp-desktopUpgrade bbswitch-kmp-default-debuginfoUpgrade pcfclock-debuginfoUpgrade kernel-xen-develUpgrade crash-kmp-default-debuginfoUpgrade crash-docUpgrade ipsetUpgrade crash-kmp-xenUpgrade kernel-debug-base-debuginfoUpgrade cloop-kmp-paeUpgrade vhba-kmp-defaultUpgrade ipset-debuginfoUpgrade crash-kmp-desktopUpgrade xen-libsUpgrade pcfclock-kmp-default-debuginfoUpgrade xen-libs-debuginfoUpgrade crash-gcore-debuginfoUpgrade cloop-kmp-desktopUpgrade cloop-kmp-pae-debuginfoUpgrade cloop-kmp-xenUpgrade bbswitchUpgrade crash-gcoreUpgrade vhba-kmpUpgrade vhba-kmp-pae-debuginfoUpgrade xen-kmp-desktopUpgrade kernel-desktop-base-debuginfoUpgrade vhba-kmp-debugsourceUpgrade kernel-xen-debuginfoUpgrade xen-libs-32bitUpgrade kernel-debug-baseUpgrade crash-kmp-paeUpgrade kernel-ec2-baseUpgrade bbswitch-debugsourceUpgrade kernel-pae-baseUpgrade kernel-ec2-debuginfoUpgrade pcfclock-kmp-desktopUpgrade xtables-addons-kmp-defaultUpgrade pcfclock-kmp-paeUpgrade crash-kmp-xen-debuginfoUpgrade ipset-debugsourceUpgrade crash-kmp-desktop-debuginfoUpgrade hdjmodUpgrade hdjmod-debugsourceUpgrade kernel-default-base-debuginfoUpgrade xenUpgrade vhba-kmp-desktopUpgrade kernel-pae-debugsourceUpgrade xen-tools-domU-debuginfoUpgrade vhba-kmp-default-debuginfoUpgrade xtables-addons-kmp-desktop-debuginfoUpgrade kernel-debug-devel-debuginfoUpgrade crash-eppicUpgrade ipset-kmp-desktop-debuginfoUpgrade kernel-debugUpgrade kernel-ec2Upgrade xen-develUpgrade vhba-kmp-desktop-debuginfoUpgrade kernel-symsUpgrade cloopUpgrade xtables-addons-kmp-desktopUpgrade hdjmod-kmp-xen-debuginfoUpgrade crash-kmp-pae-debuginfoUpgrade xtables-addons-kmp-xenUpgrade kernel-vanilla-debugsourceUpgrade xtables-addons-debuginfoUpgrade hdjmod-kmp-pae-debuginfoUpgrade kernel-default-debugsourceUpgrade crash-develUpgrade kernel-source-vanillaUpgrade pcfclock-kmp-desktop-debuginfoUpgrade xen-tools-debuginfoUpgrade kernel-debug-debugsourceUpgrade crashUpgrade kernel-desktop-debuginfoUpgrade xtables-addons-kmp-paeUpgrade crash-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-xen-debugsourceUpgrade kernel-xenUpgrade ipset-kmp-xenUpgrade xen-kmp-default-debuginfoUpgrade bbswitch-kmp-desktopUpgrade kernel-pae-debuginfoUpgrade kernel-obs-build-debugsourceUpgrade xtables-addonsUpgrade kernel-debug-develUpgrade bbswitch-kmp-desktop-debuginfoUpgrade ipset-develUpgrade pcfclock-kmp-defaultUpgrade kernel-vanillaUpgrade pcfclock-debugsourceUpgrade kernel-vanilla-develUpgrade kernel-paeUpgrade cloop-debugsourceUpgrade kernel-ec2-base-debuginfoUpgrade libipset3-debuginfoUpgrade xen-libs-debuginfo-32bitUpgrade xtables-addons-debugsourceUpgrade xtables-addons-kmp-default-debuginfoUpgrade xen-kmp-desktop-debuginfoUpgrade kernel-default-develUpgrade cloop-debuginfoUpgrade kernel-desktop-debugsourceUpgrade vhba-kmp-xen-debuginfoUpgrade bbswitch-kmp-paeUpgrade xen-kmp-defaultUpgrade hdjmod-kmp-defaultUpgrade kernel-sourceUpgrade kernel-debug-debuginfoUpgrade xen-doc-htmlUpgrade ipset-kmp-paeUpgrade pcfclock-kmp-pae-debuginfoUpgrade crash-debuginfoUpgrade xen-tools-domUUpgrade bbswitch-kmp-pae-debuginfoUpgrade xtables-addons-kmp-pae-debuginfo | Dec 18, 2015 | Aug 14, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-59-generic-lpaeUpgrade linux-image-3.13.0-61-powerpc64-embUpgrade linux-image-3.19.0-25-powerpc-e500mcUpgrade linux-image-3.13.0-61-powerpc64-smpUpgrade linux-image-3.13.0-61-generic-lpaeUpgrade linux-image-3.16.0-45-powerpc64-embUpgrade linux-image-3.13.0-61-lowlatencyUpgrade linux-image-3.13.0-61-genericUpgrade linux-image-3.19.0-25-generic-lpaeUpgrade linux-image-3.13.0-59-powerpc64-smpUpgrade linux-image-3.16.0-45-powerpc64-smpUpgrade linux-image-3.13.0-61-powerpc-smpUpgrade linux-image-3.13.0-59-powerpc-e500mcUpgrade linux-image-3.13.0-61-powerpc-e500Upgrade linux-image-3.16.0-45-lowlatencyUpgrade linux-image-3.13.0-59-lowlatencyUpgrade linux-image-3.19.0-25-lowlatencyUpgrade linux-image-3.13.0-61-powerpc-e500mcUpgrade linux-image-3.13.0-59-genericUpgrade linux-image-3.19.0-25-powerpc-smpUpgrade linux-image-3.19.0-25-powerpc64-smpUpgrade linux-image-3.13.0-59-powerpc-smpUpgrade linux-image-3.13.0-59-powerpc64-embUpgrade linux-image-3.16.0-45-powerpc-smpUpgrade linux-image-3.16.0-45-genericUpgrade linux-image-3.16.0-45-generic-lpaeUpgrade linux-image-3.13.0-59-powerpc-e500Upgrade linux-image-3.16.0-45-powerpc-e500mcUpgrade linux-image-3.19.0-25-powerpc64-embUpgrade linux-image-3.19.0-25-generic | Nov 8, 2024 | Aug 31, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub