CVE-2017-15537: Infoleak
Last updated 29 November 2024
Other sources
The x86/fpu (Floating Point Unit) subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correctly handle attempts to set reserved bits in the xstate header via the ptrace() or rtsigreturn() system call, allowing local users to read the FPU registers of other processes on the system, related to arch/x86/kernel/fpu/regset.c and arch/x86/kernel/fpu/signal.c.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15537?
CVE-2017-15537 is considered a medium severity vulnerability affecting the x86/fpu subsystem.
How do I fix CVE-2017-15537?
To fix CVE-2017-15537, upgrade your Linux kernel to version 4.13.5 or later.
Which versions of the Linux kernel are affected by CVE-2017-15537?
CVE-2017-15537 affects all Linux kernel versions prior to 4.13.5.
What components are impacted by CVE-2017-15537?
CVE-2017-15537 impacts the x86 floating-point unit subsystem within the Linux kernel.
Is CVE-2017-15537 a local or remote vulnerability?
CVE-2017-15537 is a local vulnerability, requiring local access to exploit.