vulnerability

Oracle Linux: CVE-2015-7837: ELSA-2015-2152: kernel security, bug fix, and enhancement update (IMPORTANT)

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:N/I:C/A:N)
Published
Sep 19, 2017
Added
Jan 5, 2019
Modified
Nov 29, 2024

Description

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.

Solution

oracle-linux-upgrade-kernel
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.