{"dataType": "CVE_RECORD", "containers": {"adp": [{"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"medium\"}"}}}], "affected": [{"vendor": "canonical", "product": "linux-aws-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-ibm-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-raspi-5.4", "platforms": ["bionic"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-bluefield", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-ibm-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-intel-iotg-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-iot", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-tegra-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-5.15", "platforms": ["focal"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-kvm", "platforms": ["focal", "jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-xilinx-zynqmp", "platforms": ["focal", "jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-ibm", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-raspi", "platforms": ["focal", "jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-ibm-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-intel-iot-realtime", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-intel-iotg", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-tegra-igx", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-6.8", "platforms": ["jammy"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gkeop", "platforms": ["jammy", "noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency", "platforms": ["jammy", "noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-tegra", "platforms": ["jammy", "noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gke", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-realtime", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv", "platforms": ["jammy", "noble", "resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-aws-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-fde-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-nvidia", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-azure-nvidia-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-gcp-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-hwe-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-intel", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lowlatency-hwe-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-lowlatency", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.11", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-6.8", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oracle-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-raspi-realtime", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-6.14", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-6.17", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-riscv-7.0", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-xilinx", "platforms": ["noble"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-nvidia-bos", "platforms": ["resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-oem-7.0", "platforms": ["resolute"], "defaultStatus": "affected"}, {"vendor": "canonical", "product": "linux-lts-vivid", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.19.0-74", "versionType": "custom"}], "platforms": ["trusty"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "linux-lts-xenial", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.4.0-93", "versionType": "custom"}], "platforms": ["trusty"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "linux", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.4.0-93", "versionType": "custom"}], "platforms": ["xenial"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "linux-aws", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.4.0-1032", "versionType": "custom"}], "platforms": ["xenial"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "linux-gke", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.4.0-1028", "versionType": "custom"}], "platforms": ["xenial"], "defaultStatus": "unaffected"}], "references": [{"url": "https://ubuntu.com/security/CVE-2015-7837"}, {"url": "https://ubuntu.com/security/notices/USN-3405-1"}, {"url": "https://ubuntu.com/security/notices/USN-3405-2"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2015-7837"}], "descriptions": [{"lang": "en", "value": "The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot."}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2015-10-15T00:00:00Z", "x_subShortName": "canonical"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"unimportant\"}"}}}], "affected": [{"vendor": "debian", "product": "linux", "platforms": ["bookworm", "forky", "sid", "trixie"], "defaultStatus": "unaffected"}], "references": [{"url": "https://security-tracker.debian.org/tracker/CVE-2015-7837"}], "descriptions": [{"lang": "en", "value": "The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot."}], "providerMetadata": {"orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian", "dateUpdated": "2017-09-19T16:00:00.000Z", "x_subShortName": "debian"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"IMPORTANT\"}"}}}], "affected": [{"vendor": "oraclelinux", "product": "dtrace-modules-3.8.13-118.29.1.el6uek", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.5-3.el6", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el6uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-debug", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el6uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-debug-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el6uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el6uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el6uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el6uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:6"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "dtrace-modules-3.8.13-118.29.1.el7uek", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.5-3.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-abi-whitelists", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-debug", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-debug-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-headers", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-tools", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-tools-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-tools-libs-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el7uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-debug", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el7uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-debug-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el7uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el7uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el7uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "kernel-uek-firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.8.13-118.29.1.el7uek", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "perf", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "python-perf", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:7"], "defaultStatus": "unaffected"}], "references": [{"url": "https://linux.oracle.com/cve/CVE-2015-7837.html"}], "descriptions": [{"lang": "en", "value": "The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000006", "shortName": "oraclelinux", "dateUpdated": "2015-11-24T00:00:00Z", "x_subShortName": "oraclelinux"}}, {"metrics": [{"cvssV2_0": {"version": "2.0", "baseScore": 1.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Low\"}"}}}], "affected": [{"vendor": "redhat", "product": "kernel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-abi-whitelists", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-bootwrapper", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-debug", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-debug-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-doc", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-firmware", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-headers", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-kdump", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-kdump-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "perf", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "python-perf", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2015-7837"}], "descriptions": [{"lang": "en", "value": "Red Hat's versions of the associated software have been determined to NOT be affected by CVE-2015-7837."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2015-10-14T00:00:00Z", "x_subShortName": "redhat_6"}}, {"metrics": [{"cvssV2_0": {"version": "2.0", "baseScore": 1.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "redhat", "product": "kernel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-abi-whitelists", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-bootwrapper", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-debug", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-debug-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-headers", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-kdump", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-kdump-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-rt", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.rt56.204.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-rt-debug", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.rt56.204.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-rt-debug-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.rt56.204.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-rt-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.rt56.204.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-rt-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.rt56.204.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-rt-trace", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.rt56.204.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-rt-trace-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.rt56.204.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-tools", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-tools-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "kernel-tools-libs-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "perf", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "python-perf", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.10.0-327.el7", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2015:2152"}, {"url": "https://access.redhat.com/errata/RHSA-2015:2411"}, {"url": "https://access.redhat.com/security/cve/CVE-2015-7837"}], "descriptions": [{"lang": "en", "value": "The kernel packages contain the Linux kernel, the core of any Linux\noperating system.\n\n* A flaw was found in the way the Linux kernel's file system implementation\nhandled rename operations in which the source was inside and the\ndestination was outside of a bind mount. A privileged user inside a\ncontainer could use this flaw to escape the bind mount and, potentially,\nescalate their privileges on the system. (CVE-2015-2925, Important)\n\n* A race condition flaw was found in the way the Linux kernel's IPC\nsubsystem initialized certain fields in an IPC object structure that were\nlater used for permission checking before inserting the object into a\nglobally visible list. A local, unprivileged user could potentially use\nthis flaw to elevate their privileges on the system. (CVE-2015-7613,\nImportant)\n\n* It was found that reporting emulation failures to user space could lead\nto either a local (CVE-2014-7842) or a L2->L1 (CVE-2010-5313) denial of\nservice. In the case of a local denial of service, an attacker must have\naccess to the MMIO area or be able to access an I/O port. (CVE-2010-5313,\nCVE-2014-7842, Moderate)\n\n* A flaw was found in the way the Linux kernel's KVM subsystem handled\nnon-canonical addresses when emulating instructions that change the RIP\n(for example, branches or calls). A guest user with access to an I/O or\nMMIO region could use this flaw to crash the guest. (CVE-2014-3647,\nModerate)\n\n* It was found that the Linux kernel memory resource controller's (memcg)\nhandling of OOM (out of memory) conditions could lead to deadlocks.\nAn attacker could use this flaw to lock up the system. (CVE-2014-8171,\nModerate)\n\n* A race condition flaw was found between the chown and execve system\ncalls. A local, unprivileged user could potentially use this flaw to\nescalate their privileges on the system. (CVE-2015-3339, Moderate)\n\n* A flaw was discovered in the way the Linux kernel's TTY subsystem handled\nthe tty shutdown phase. A local, unprivileged user could use this flaw to\ncause a denial of service on the system. (CVE-2015-4170, Moderate)\n\n* A NULL pointer dereference flaw was found in the SCTP implementation.\nA local user could use this flaw to cause a denial of service on the system\nby triggering a kernel panic when creating multiple sockets in parallel\nwhile the system did not have the SCTP module loaded. (CVE-2015-5283,\nModerate)\n\n* A flaw was found in the way the Linux kernel's perf subsystem retrieved\nuserlevel stack traces on PowerPC systems. A local, unprivileged user could\nuse this flaw to cause a denial of service on the system. (CVE-2015-6526,\nModerate)\n\n* A flaw was found in the way the Linux kernel's Crypto subsystem handled\nautomatic loading of kernel modules. A local user could use this flaw to\nload any installed kernel module, and thus increase the attack surface of\nthe running kernel. (CVE-2013-7421, CVE-2014-9644, Low)\n\n* An information leak flaw was found in the way the Linux kernel changed\ncertain segment registers and thread-local storage (TLS) during a context\nswitch. A local, unprivileged user could use this flaw to leak the user\nspace TLS base address of an arbitrary process. (CVE-2014-9419, Low)\n\n* It was found that the Linux kernel KVM subsystem's sysenter instruction\nemulation was not sufficient. An unprivileged guest user could use this\nflaw to escalate their privileges by tricking the hypervisor to emulate a\nSYSENTER instruction in 16-bit mode, if the guest OS did not initialize the\nSYSENTER model-specific registers (MSRs). Note: Certified guest operating\nsystems for Red Hat Enterprise Linux with KVM do initialize the SYSENTER\nMSRs and are thus not vulnerable to this issue when running on a KVM\nhypervisor. (CVE-2015-0239, Low)\n\n* A flaw was found in the way the Linux kernel handled the securelevel\nfunctionality after performing a kexec operation. A local attacker could\nuse this flaw to bypass the security mechanism of the\nsecurelevel/secureboot combination. (CVE-2015-7837, Low)"}, {"lang": "en", "value": "The kernel-rt packages contain the Linux kernel, the core of any Linux\noperating system.\n\n* A flaw was found in the way the Linux kernel's file system implementation\nhandled rename operations in which the source was inside and the\ndestination was outside of a bind mount. A privileged user inside a\ncontainer could use this flaw to escape the bind mount and, potentially,\nescalate their privileges on the system. (CVE-2015-2925, Important)\n\n* A race condition flaw was found in the way the Linux kernel's IPC\nsubsystem initialized certain fields in an IPC object structure that were\nlater used for permission checking before inserting the object into a\nglobally visible list. A local, unprivileged user could potentially use\nthis flaw to elevate their privileges on the system. (CVE-2015-7613,\nImportant)\n\n* It was found that the Linux kernel memory resource controller's (memcg)\nhandling of OOM (out of memory) conditions could lead to deadlocks.\nAn attacker able to continuously spawn new processes within a single\nmemory-constrained cgroup during an OOM event could use this flaw to lock\nup the system. (CVE-2014-8171, Moderate)\n\n* A race condition flaw was found between the chown and execve system\ncalls. When changing the owner of a setuid user binary to root, the race\ncondition could momentarily make the binary setuid root. A local,\nunprivileged user could potentially use this flaw to escalate their\nprivileges on the system. (CVE-2015-3339, Moderate)\n\n* A flaw was discovered in the way the Linux kernel's TTY subsystem handled\nthe tty shutdown phase. A local, unprivileged user could use this flaw to\ncause a denial of service on the system by holding a reference to the ldisc\nlock during tty shutdown, causing a deadlock. (CVE-2015-4170, Moderate)\n\n* A NULL pointer dereference flaw was found in the SCTP implementation.\nA local user could use this flaw to cause a denial of service on the system\nby triggering a kernel panic when creating multiple sockets in parallel\nwhile the system did not have the SCTP module loaded. (CVE-2015-5283,\nModerate)\n\n* A flaw was found in the way the Linux kernel's Crypto subsystem handled\nautomatic loading of kernel modules. A local user could use this flaw to\nload any installed kernel module, and thus increase the attack surface of\nthe running kernel. (CVE-2013-7421, CVE-2014-9644, Low)\n\n* An information leak flaw was found in the way the Linux kernel changed\ncertain segment registers and thread-local storage (TLS) during a context\nswitch. A local, unprivileged user could use this flaw to leak the user\nspace TLS base address of an arbitrary process. (CVE-2014-9419, Low)\n\n* A flaw was found in the way the Linux kernel handled the securelevel\nfunctionality after performing a kexec operation. A local attacker could\nuse this flaw to bypass the security mechanism of the\nsecurelevel/secureboot combination. (CVE-2015-7837, Low)\n\nRed Hat would like to thank Linn Crosetto of HP for reporting the\nCVE-2015-7837 issue. The CVE-2015-5283 issue was discovered by Ji Jianwen\nfrom Red Hat engineering.\n\nThe kernel-rt packages have been upgraded to version 3.10.0-326.rt56.204,\nwhich provides a number of bug fixes and enhancements. (BZ#1201915,\nBZ#1211724)\n\nThis update also fixes several bugs and adds multiple enhancements.\nRefer to the following Red Hat Knowledgebase article for information on the\nmost significant of these changes:\n\nhttps://access.redhat.com/articles/2055783\n\nAll kernel-rt users are advised to upgrade to these updated packages, which\ncorrect these issues and add these enhancements. The system must be\nrebooted for this update to take effect."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2015-10-14T00:00:00Z", "x_subShortName": "redhat_7"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp2", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-base", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp2", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-devel", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp2", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-man", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp2", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:sle_hpc:11:sp4", "cpe:/o:suse:sles:11:sp2", "cpe:/o:suse:sles:11:sp3", "cpe:/o:suse:sles:11:sp4", "cpe:/o:suse:sles_sap:11:sp4"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 950804"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7837", "name": "Mitre CVE-2015-7837"}, {"url": "https://www.suse.com/security/cve/CVE-2015-7837", "name": "SUSE CVE-2015-7837"}], "descriptions": [{"lang": "en", "value": "\n    The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-04-30T00:00:00Z", "x_subShortName": "suse_server_11"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sles:12"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-base", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sles:12"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-devel", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sles:12"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-default-man", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sles:12"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-devel", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sles:12"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-macros", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sles:12"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:sle_hpc:12", "cpe:/o:suse:sles:12"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 950804"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7837", "name": "Mitre CVE-2015-7837"}, {"url": "https://www.suse.com/security/cve/CVE-2015-7837", "name": "SUSE CVE-2015-7837"}], "descriptions": [{"lang": "en", "value": "\n    The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-04-30T00:00:00Z", "x_subShortName": "suse_server_12"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:sled:11:sp2", "cpe:/o:suse:sled:11:sp3", "cpe:/o:suse:sled:11:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:sled:11:sp2", "cpe:/o:suse:sled:11:sp3", "cpe:/o:suse:sled:11:sp4"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 950804"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7837", "name": "Mitre CVE-2015-7837"}, {"url": "https://www.suse.com/security/cve/CVE-2015-7837", "name": "SUSE CVE-2015-7837"}], "descriptions": [{"lang": "en", "value": "\n    The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-04-30T00:00:00Z", "x_subShortName": "suse_desktop_11"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "suse", "product": "kernel-default", "platforms": ["cpe:/o:suse:sled:12"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "kernel-source", "platforms": ["cpe:/o:suse:sled:12"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 950804"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7837", "name": "Mitre CVE-2015-7837"}, {"url": "https://www.suse.com/security/cve/CVE-2015-7837", "name": "SUSE CVE-2015-7837"}], "descriptions": [{"lang": "en", "value": "\n    The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2021-04-30T00:00:00Z", "x_subShortName": "suse_desktop_12"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV2_0": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}}, {"format": "CVSS", "cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"cpes": ["cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux:7.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_linux", "versions": [{"status": "affected", "version": "7.0"}, {"status": "affected", "version": "7.2"}, {"status": "affected", "version": "7.3"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_linux_desktop", "versions": [{"status": "affected", "version": "7.0"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_linux_server_aus", "versions": [{"status": "affected", "version": "7.3"}, {"status": "affected", "version": "7.4"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_linux_workstation", "versions": [{"status": "affected", "version": "7.0"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "enterprise_mrg", "versions": [{"status": "affected", "version": "2.0"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:redhat:kernel-rt:7.0:*:*:*:*:*:*:*"], "vendor": "redhat", "product": "kernel-rt", "versions": [{"status": "affected", "version": "7.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798", "tags": ["issue-tracking", "third-party-advisory"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1272472", "tags": ["issue-tracking", "vendor-advisory"]}, {"url": "http://www.openwall.com/lists/oss-security/2015/10/15/6", "tags": ["mailing-list", "third-party-advisory"]}, {"url": "http://www.securityfocus.com/bid/77097", "tags": ["third-party-advisory", "vdb-entry"]}, {"url": "http://rhn.redhat.com/errata/RHSA-2015-2152.html", "tags": ["vendor-advisory"]}, {"url": "http://rhn.redhat.com/errata/RHSA-2015-2411.html", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot."}, {"lang": "es", "value": "El kernel de Linux, tal y como se emplea en Red Hat Enterprise Linux 7, kernel-rt y Enterprise MRG 2 y cuando se emplea con UEFI Secure Boot habilitado, permite que usuarios locales omitan las restricciones securelevel/secureboot previstas aprovechando la gestión incorrecta de la marca secure_boot cuando se reinicia kexec."}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-254", "description": "CWE-254"}]}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000003", "shortName": "nvd", "dateUpdated": "2017-09-19T16:29:00Z", "x_subShortName": "nvd"}}}, "cveMetadata": {"cveId": "CVE-2015-7837", "state": "PUBLISHED", "dateUpdated": "2025-04-20T01:37:25Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2017-09-19T16:29:00Z", "assignerShortName": "mitre"}, "dataVersion": "5.0"}