Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-0239
HistoryJan 23, 2015 - 12:00 a.m.

CVE-2015-0239

2015-01-2300:00:00
ubuntu.com
ubuntu.com
13

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

51.8%

The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel
before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows
guest OS users to gain guest OS privileges or cause a denial of service
(guest OS crash) by triggering use of a 16-bit code segment for emulation
of a SYSENTER instruction.

Bugs

Notes

Author Note
jdstrand android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-77.112UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-46.75UNKNOWN
ubuntu14.10noarchlinux< 3.16.0-31.41UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1645.64UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-46.75~precise1UNKNOWN
ubuntu14.04noarchlinux-lts-utopic< 3.16.0-31.41~14.04.1UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1460.80UNKNOWN

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

51.8%