CVE:CVE-2015-5157
CNNVD:CNNVD-201507-764
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 4.1.5及之前版本存在权限许可和访问控制问题漏洞，该漏洞源于程序处理用户空间进程中产生的NMI时，没有正确处理IRET错误。本地攻击者可通过触发NMI利用该漏洞获取权限。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.7.z,and avoid the version 6.7.z; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade linux linux_kernel to a higher version than 4.1.5,and avoid the version (,4.1.5]