CVE-2015-5157: High severity red hat enterprise linux desktop vulnerability
arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5157?
CVE-2015-5157 is classified as a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2015-5157?
To fix CVE-2015-5157, users should upgrade to a version of the Linux kernel that is later than 4.1.6 or apply the relevant patches provided by their Linux distribution.
Which Linux distributions are affected by CVE-2015-5157?
CVE-2015-5157 affects various Red Hat Enterprise Linux versions, including Enterprise Linux Desktop, HPC Node, Server, and Workstation, as well as specific versions of the Linux kernel.
Can CVE-2015-5157 be exploited remotely?
No, CVE-2015-5157 requires local access to the system for exploitation, as it relies on triggering non-maskable interrupts (NMIs) during userspace execution.
Is there a workaround for CVE-2015-5157?
Currently, there are no recommended workarounds for CVE-2015-5157 other than upgrading the kernel to a secure version.