Linux Kernel Local Privilege Escalation Vulnerability (CVE-2015-5157)

Linux Kernel Local Privilege Escalation Vulnerability (CVE-2015-5157)
Linux Kernel Local Privilege Escalation Vulnerability (CVE-2015-5157)

Release date:
Updated on:

Affected Systems:

Linux kernel 3.3.5
Linux kernel 3.3.4
Linux kernel 3.3.2

Description:

Bugtraq id: 76005
CVE (CAN) ID: CVE-2015-5157

Linux Kernel is the Kernel of the Linux operating system.

When the user code points RSP to the kernel NMI stack and executes SYSCALL, the malicious user code can ignore some NMI, obtain the elevated permissions, or cause the kernel to crash.

<* Source: Petr Matousek (pmatouse @ ...hat.com)
Andy Lutomirski
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit? Id = 810bc075f78ff2c221536eb3008eac6a424dba2d

How to install Kernel 4.0.2 on CentOS 7

How to install Linux Kernel 4.0 on CentOS 7

How to install Linux kernel 4.0 on Ubuntu/CentOS?

How to install Linux kernel 13.10 On Ubuntu 3.12

How to install the 3.16.7 CKT2 kernel in Ubuntu 14.10, Ubuntu 14.04, and its derivative versions

Linux Kernel: click here
Linux Kernel: click here

This article permanently updates the link address: