ByteOS Network

CVE Vulnerability Details :

CVE-2015-3290

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-31 Aug, 2015 | 10:00

Updated At-06 Aug, 2024 | 05:39

▼CVE Numbering Authority (CNA)

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing, which allows local users to gain privileges by triggering an NMI within a certain instruction window.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1243465	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2015/08/04/8	mailing-list x_refsource_MLIST
http://www.securityfocus.com/bid/76004	vdb-entry x_refsource_BID
https://www.exploit-db.com/exploits/37722/	exploit x_refsource_EXPLOIT-DB
http://www.ubuntu.com/usn/USN-2689-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2690-1	vendor-advisory x_refsource_UBUNTU
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2691-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2688-1	vendor-advisory x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html	vendor-advisory x_refsource_SUSE
http://www.debian.org/security/2015/dsa-3313	vendor-advisory x_refsource_DEBIAN
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2015/07/22/7	mailing-list x_refsource_MLIST
https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2687-1	vendor-advisory x_refsource_UBUNTU

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1243465

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2015/08/04/8

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.securityfocus.com/bid/76004

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://www.exploit-db.com/exploits/37722/

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://www.ubuntu.com/usn/USN-2689-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-2690-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2691-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-2688-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.debian.org/security/2015/dsa-3313

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2015/07/22/7

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2687-1

Resource:

vendor-advisory

x_refsource_UBUNTU

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1243465	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2015/08/04/8	mailing-list x_refsource_MLIST x_transferred
http://www.securityfocus.com/bid/76004	vdb-entry x_refsource_BID x_transferred
https://www.exploit-db.com/exploits/37722/	exploit x_refsource_EXPLOIT-DB x_transferred
http://www.ubuntu.com/usn/USN-2689-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-2690-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2691-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-2688-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.debian.org/security/2015/dsa-3313	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2015/07/22/7	mailing-list x_refsource_MLIST x_transferred
https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2687-1	vendor-advisory x_refsource_UBUNTU x_transferred