NVD Vulnerability Detail

CVE-2015-5157

Summary	arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.
Publication Date	Aug. 31, 2015, 7:59 p.m.
Registration Date	Jan. 26, 2021, 2:52 p.m.
Last Update	Nov. 21, 2024, 11:32 a.m.

CVSS2.0 : HIGH
Score	7.2
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7.z:::::::*
cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:linux:linux_kernel::::::::	3.15			3.16.35
cpe:2.3:o:linux:linux_kernel::::::::	3.19			4.1.6
cpe:2.3:o:linux:linux_kernel::::::::	3.17			3.18.22
cpe:2.3:o:linux:linux_kernel::::::::	3.13			3.14.54
cpe:2.3:o:linux:linux_kernel::::::::				3.12.47

Related information, measures and tools

No	URL	タグ
1	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a	Mailing List Third Party Advisory
2	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a	Mailing List Third Party Advisory
3	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html	Third Party Advisory VDB Entry
4	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html	Third Party Advisory VDB Entry
5	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html	Third Party Advisory VDB Entry
6	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html	Third Party Advisory VDB Entry
7	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html	Third Party Advisory VDB Entry
8	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html	Third Party Advisory VDB Entry
9	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html	Third Party Advisory VDB Entry
10	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html	Third Party Advisory VDB Entry
11	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html	Third Party Advisory VDB Entry
12	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html	Third Party Advisory VDB Entry
13	http://rhn.redhat.com/errata/RHSA-2016-0185.html	Third Party Advisory VDB Entry
14	http://rhn.redhat.com/errata/RHSA-2016-0185.html	Third Party Advisory VDB Entry
15	http://rhn.redhat.com/errata/RHSA-2016-0212.html	Third Party Advisory VDB Entry
16	http://rhn.redhat.com/errata/RHSA-2016-0212.html	Third Party Advisory VDB Entry
17	http://rhn.redhat.com/errata/RHSA-2016-0224.html	Third Party Advisory VDB Entry
18	http://rhn.redhat.com/errata/RHSA-2016-0224.html	Third Party Advisory VDB Entry
19	http://rhn.redhat.com/errata/RHSA-2016-0715.html	Third Party Advisory VDB Entry
20	http://rhn.redhat.com/errata/RHSA-2016-0715.html	Third Party Advisory VDB Entry
21	http://www.debian.org/security/2015/dsa-3313	Third Party Advisory VDB Entry
22	http://www.debian.org/security/2015/dsa-3313	Third Party Advisory VDB Entry
23	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6	Vendor Advisory
24	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6	Vendor Advisory
25	http://www.openwall.com/lists/oss-security/2015/07/22/7	Mailing List
26	http://www.openwall.com/lists/oss-security/2015/07/22/7	Mailing List
27	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	Third Party Advisory
28	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	Third Party Advisory
29	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	Third Party Advisory
30	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	Third Party Advisory
31	http://www.securityfocus.com/bid/76005	Third Party Advisory VDB Entry
32	http://www.securityfocus.com/bid/76005	Third Party Advisory VDB Entry
33	http://www.ubuntu.com/usn/USN-2687-1	Third Party Advisory VDB Entry
34	http://www.ubuntu.com/usn/USN-2687-1	Third Party Advisory VDB Entry
35	http://www.ubuntu.com/usn/USN-2688-1	Third Party Advisory VDB Entry
36	http://www.ubuntu.com/usn/USN-2688-1	Third Party Advisory VDB Entry
37	http://www.ubuntu.com/usn/USN-2689-1	Third Party Advisory VDB Entry
38	http://www.ubuntu.com/usn/USN-2689-1	Third Party Advisory VDB Entry
39	http://www.ubuntu.com/usn/USN-2690-1	Third Party Advisory VDB Entry
40	http://www.ubuntu.com/usn/USN-2690-1	Third Party Advisory VDB Entry
41	http://www.ubuntu.com/usn/USN-2691-1	Third Party Advisory VDB Entry
42	http://www.ubuntu.com/usn/USN-2691-1	Third Party Advisory VDB Entry
43	https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a	Third Party Advisory
44	https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html

JVN Vulnerability Information

x86_64 プラットフォーム上で稼動する Linux Kernel の arch/x86/entry/entry_64.S における権限を取得される脆弱性

Title	x86_64 プラットフォーム上で稼動する Linux Kernel の arch/x86/entry/entry_64.S における権限を取得される脆弱性
Summary	x86_64 プラットフォーム上で稼動する Linux Kernel の arch/x86/entry/entry_64.S は、ユーザ空間の実行中に発生する NMI 処理の際の IRET 障害を適切に処理しないため、権限を取得される脆弱性が存在します。
Possible impacts	ローカルユーザにより、NMI を誘発されることで、権限を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 16, 2015, midnight
Registration Date	Sept. 1, 2015, 6 p.m.
Last Update	Sept. 1, 2015, 6 p.m.

Affected System

Linux

Linux Kernel 4.1.6 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-5157	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5157
National Vulnerability Database (NVD)
2	CVE-2015-5157	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5157

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	Name	URL
ChangeLog
1	ChangeLog-4.1.6	https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6
GitHub
2	x86/nmi/64: Switch stacks on userspace NMI entry	https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a
Linux Kernel
3	Linux Kernel Archives	http://www.kernel.org
Linux kernel source tree
4	x86/nmi/64: Switch stacks on userspace NMI entry	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a

Change Log

No	Changed Details	Date of change
0	[2015年09月01日] 掲載	Feb. 17, 2018, 10:37 a.m.