Privilege Escalation via NMI Handling Vulnerability in Linux Kernel

Privilege Escalation via NMI Handling Vulnerability in Linux Kernel

CVE-2015-5157 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.