Unscored severity · published Aug 31, 2015
CVE-2015-5157
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might…
–
CVSS
0.6%
EPSS
No
On KEV
Description
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 3.12.47; 3.13 before 3.14.54; 3.15 before 3.16.35; 3.17 before 3.18.22; 3.19 before 4.1.6 · source: NVD
EL
Enterprise Linux Desktop · Redhat
6.0 · source: NVD
EL
Enterprise Linux Hpc Node · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
6.7.z · source: NVD
EL
Enterprise Linux Workstation · Redhat
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5157
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5157
Mailing List
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability