{ "schema_version": "1.4.0", "id": "GHSA-v8jv-m5jm-jgfg", "modified": "2025-04-12T12:51:28Z", "published": "2022-05-17T01:05:40Z", "aliases": [ "CVE-2015-3290" ], "details": "arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing, which allows local users to gain privileges by triggering an NMI within a certain instruction window.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3290" }, { "type": "WEB", "url": "https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243465" }, { "type": "WEB", "url": "https://www.exploit-db.com/exploits/37722" }, { "type": "WEB", "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html" }, { "type": "WEB", "url": "http://www.debian.org/security/2015/dsa-3313" }, { "type": "WEB", "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2015/07/22/7" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2015/08/04/8" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/76004" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2687-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2688-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2689-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2690-1" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2691-1" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-08-31T10:59:00Z" } }