Launchpad.net

CVE 2015-3290

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing, which allows local users to gain privileges by triggering an NMI within a certain instruction window.

Related bugs and status

CVE-2015-3290 (Candidate) is related to these bugs:

Bug #1470091: update for V3 kernel bits and improved multiple fan slice support

		In	Importance	Status
1470091	update for V3 kernel bits and improved multiple fan slice support	ubuntu-fan (Ubuntu)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	iproute2 (Ubuntu)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux (Ubuntu)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	iproute2 (Ubuntu Wily)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux (Ubuntu Wily)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	ubuntu-fan (Ubuntu Wily)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	iproute2 (Ubuntu Vivid)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux (Ubuntu Vivid)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	ubuntu-fan (Ubuntu Vivid)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	iproute2 (Ubuntu Trusty)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux (Ubuntu Trusty)	High	New
1470091	update for V3 kernel bits and improved multiple fan slice support	ubuntu-fan (Ubuntu Trusty)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux-lts-vivid (Ubuntu Trusty)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux-lts-utopic (Ubuntu Trusty)	High	New

Bug #1477026: CVE-2015-3290

		In	Importance	Status
1477026	CVE-2015-3290	linux (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-fsl-imx51 (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-mvl-dove (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-lts-backport-maverick (Ubuntu)	Undecided	New
1477026	CVE-2015-3290	linux-lts-backport-natty (Ubuntu)	Undecided	New
1477026	CVE-2015-3290	linux-ti-omap4 (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-ec2 (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-ec2 (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-fsl-imx51 (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-lts-backport-maverick (Ubuntu Wily)	Undecided	New
1477026	CVE-2015-3290	linux-lts-backport-natty (Ubuntu Wily)	Undecided	New
1477026	CVE-2015-3290	linux-mvl-dove (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-ti-omap4 (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux (Ubuntu Vivid)	High	Fix Released
1477026	CVE-2015-3290	linux-ec2 (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-fsl-imx51 (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-lts-backport-maverick (Ubuntu Vivid)	Undecided	New
1477026	CVE-2015-3290	linux-lts-backport-natty (Ubuntu Vivid)	Undecided	New
1477026	CVE-2015-3290	linux-mvl-dove (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-ti-omap4 (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Won't Fix
1477026	CVE-2015-3290	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Won't Fix
1477026	CVE-2015-3290	linux (Ubuntu Trusty)	High	Fix Released
1477026	CVE-2015-3290	linux-ec2 (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-fsl-imx51 (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	New
1477026	CVE-2015-3290	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	New
1477026	CVE-2015-3290	linux-mvl-dove (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-ti-omap4 (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-ec2 (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-fsl-imx51 (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1477026	CVE-2015-3290	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1477026	CVE-2015-3290	linux-mvl-dove (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-ti-omap4 (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-lts-trusty (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-lts-trusty (Ubuntu Precise)	High	Fix Released
1477026	CVE-2015-3290	linux-lts-trusty (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-lts-trusty (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-lts-trusty (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-armadaxp (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-armadaxp (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-armadaxp (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-armadaxp (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-armadaxp (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-goldfish (Ubuntu)	High	New
1477026	CVE-2015-3290	linux-goldfish (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-goldfish (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-goldfish (Ubuntu Vivid)	High	Won't Fix
1477026	CVE-2015-3290	linux-goldfish (Ubuntu Wily)	High	New
1477026	CVE-2015-3290	linux-lts-saucy (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-lts-saucy (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-lts-saucy (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-lts-saucy (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-lts-saucy (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-lts-quantal (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-lts-quantal (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-lts-quantal (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-lts-quantal (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-lts-quantal (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-flo (Ubuntu)	High	New
1477026	CVE-2015-3290	linux-flo (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-flo (Ubuntu Trusty)	High	Invalid
1477026	CVE-2015-3290	linux-flo (Ubuntu Vivid)	High	Won't Fix
1477026	CVE-2015-3290	linux-flo (Ubuntu Wily)	High	New
1477026	CVE-2015-3290	linux-lts-vivid (Ubuntu)	High	Invalid
1477026	CVE-2015-3290	linux-lts-vivid (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-lts-vivid (Ubuntu Trusty)	High	Fix Released
1477026	CVE-2015-3290	linux-lts-vivid (Ubuntu Vivid)	High	Invalid
1477026	CVE-2015-3290	linux-lts-vivid (Ubuntu Wily)	High	Invalid
1477026	CVE-2015-3290	linux-mako (Ubuntu)	High	New
1477026	CVE-2015-3290	linux-mako (Ubuntu Precise)	High	Invalid
1477026	CVE-2015-3290	linux-mako (Ubuntu Trusty)	High	Invalid

Bug #1477250: linux: 3.19.0-24.25 -proposed tracker

		In	Importance	Status
1477250	linux: 3.19.0-24.25 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1477250	linux: 3.19.0-24.25 -proposed tracker	linux (Ubuntu Vivid)	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1479093: Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98

		In	Importance	Status
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux (Ubuntu)	Medium	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-utopic (Ubuntu)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-vivid (Ubuntu)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux (Ubuntu Trusty)	High	Fix Released
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-utopic (Ubuntu Trusty)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-vivid (Ubuntu Trusty)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux (Ubuntu Wily)	Medium	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-utopic (Ubuntu Wily)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-vivid (Ubuntu Wily)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux (Ubuntu Vivid)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-utopic (Ubuntu Vivid)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-vivid (Ubuntu Vivid)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-trusty (Ubuntu)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-trusty (Ubuntu Trusty)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-trusty (Ubuntu Vivid)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-trusty (Ubuntu Wily)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux (Ubuntu Precise)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-trusty (Ubuntu Precise)	Undecided	Fix Released
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-utopic (Ubuntu Precise)	Undecided	Invalid
1479093	Segfault in ld-2.19.so while starting Steam after upgrade to 3.13.0-59.98	linux-lts-vivid (Ubuntu Precise)	Undecided	Invalid

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2015-3290

Related bugs and status

Related bugs

References