CVE-2015-3291
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not...
CVE-2015-3291 is a low vulnerability (CVSS 2.1) in Linux Kernel, published July 23, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in linux 4.0.8-2.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.40%EPSS, 34th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
4.0.8-2linux +10 more
Description
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 | before 4.0.8-2 | 4.0.8-2 |
linuxDebian:13 | before 4.0.8-2 | 4.0.8-2 |
linuxDebian:14 | before 4.0.8-2 | 4.0.8-2 |
linuxDebian:8 From an advisory covering 6 CVEs | before 3.16.7-ckt11-1+deb8u2, plus listed versions 3.16.7-ckt11-13.16.7-ckt11-1+deb8u13.16.7-ckt11-1+deb8u2~bpo70+13.16.7-ckt11-1~bpo70+13.16.7-ckt9-23.16.7-ckt9-33.16.7-ckt9-3~deb8u13.16.7-ckt9-3~deb8u1~bpo70+1 | 3.16.7-ckt11-1+deb8u2 |
linuxUbuntu:14.04:LTS | before 3.13.0-59.98, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70 | 3.13.0-59.98 |
linux-lts-utopicUbuntu:14.04:LTS | before 3.16.0-45.60~14.04.1, plus listed versions 3.16.0-25.33~14.04.23.16.0-26.35~14.04.13.16.0-28.37~14.04.13.16.0-28.38~14.04.13.16.0-29.39~14.04.1 Show 16 moreShow less3.16.0-30.40~14.04.13.16.0-31.41~14.04.13.16.0-31.43~14.04.13.16.0-33.44~14.04.13.16.0-34.45~14.04.13.16.0-34.47~14.04.13.16.0-36.48~14.04.13.16.0-37.49~14.04.13.16.0-37.51~14.04.13.16.0-38.52~14.04.13.16.0-39.53~14.04.13.16.0-40.54~14.04.13.16.0-41.55~14.04.13.16.0-41.57~14.04.13.16.0-43.58~14.04.13.16.0-44.59~14.04.1 | 3.16.0-45.60~14.04.1 |
linux-lts-vividUbuntu:14.04:LTS | before 3.19.0-25.26~14.04.1, plus listed versions 3.19.0-18.18~14.04.13.19.0-20.20~14.04.13.19.0-21.21~14.04.13.19.0-22.22~14.04.13.19.0-23.24~14.04.1 | 3.19.0-25.26~14.04.1 |
linuxUbuntu:14.04:LTS From an advisory covering 4 CVEs | before 3.13.0-59.98, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70 | 3.13.0-59.98 |
linux-lts-utopicUbuntu:14.04:LTS From an advisory covering 4 CVEs | before 3.16.0-45.60~14.04.1, plus listed versions 3.16.0-25.33~14.04.23.16.0-26.35~14.04.13.16.0-28.37~14.04.13.16.0-28.38~14.04.13.16.0-29.39~14.04.1 Show 16 moreShow less3.16.0-30.40~14.04.13.16.0-31.41~14.04.13.16.0-31.43~14.04.13.16.0-33.44~14.04.13.16.0-34.45~14.04.13.16.0-34.47~14.04.13.16.0-36.48~14.04.13.16.0-37.49~14.04.13.16.0-37.51~14.04.13.16.0-38.52~14.04.13.16.0-39.53~14.04.13.16.0-40.54~14.04.13.16.0-41.55~14.04.13.16.0-41.57~14.04.13.16.0-43.58~14.04.13.16.0-44.59~14.04.1 | 3.16.0-45.60~14.04.1 |
linux-lts-vividUbuntu:14.04:LTS From an advisory covering 4 CVEs | before 3.19.0-25.26~14.04.1, plus listed versions 3.19.0-18.18~14.04.13.19.0-20.20~14.04.13.19.0-21.21~14.04.13.19.0-22.22~14.04.13.19.0-23.24~14.04.1 | 3.19.0-25.26~14.04.1 |
linuxUbuntu:14.04:LTS From an advisory covering 3 CVEs | before 3.13.0-61.100, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70 | 3.13.0-61.100 |
What each source reports
NVD Score used
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
- Record
CVE-2015-3291- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-17
- Updated
- 2026-11-02
CVE ListNo score
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
- Record
CVE-2015-3291- Updated
- 2026-11-02
EUVDEUVD-2015-3338No score
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
- Record
EUVD-2015-3338- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3x5w-2m22-6q47No score
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not...
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
- Record
GHSA-3x5w-2m22-6q47- Updated
- 2026-11-02
OSVNo score
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
- Record
CVE-2015-3291- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-3291No score
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
- Record
DEBIAN-CVE-2015-3291- Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2015-3291No score
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.
- Record
UBUNTU-CVE-2015-3291- Updated
- 2026-11-02
OSVUSN-2688-1No score
linux vulnerabilities
Andy Lutomirski discovered a flaw in the Linux kernel's handling of nested NMIs (non-maskable interrupts). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges. (CVE-2015-3290)
Colin King discovered a flaw in the add_key function of the Linux kernel's keyring subsystem. A local user could exploit this flaw to cause a denial of service (memory exhaustion). (CVE-2015-1333)
Andy Lutomirski discovered a flaw that allows user to cause the Linux kernel to ignore some NMIs (non-maskable interrupts). A local unprivileged user could exploit this flaw to potentially cause the system to miss important NMIs resulting in unspecified effects. (CVE-2015-3291)
Andy Lutomirski and Petr Matousek discovered that an NMI (non-maskable interrupt) that interrupts userspace and encounters an IRET fault is incorrectly handled by the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service (kernel OOPs), corruption, or potentially escalate privileges on the system. (CVE-2015-5157)
- Record
USN-2688-1- Updated
- 2026-11-02
OSVUSN-2689-1No score
linux-lts-utopic vulnerabilities
Andy Lutomirski discovered a flaw in the Linux kernel's handling of nested NMIs (non-maskable interrupts). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges. (CVE-2015-3290)
Colin King discovered a flaw in the add_key function of the Linux kernel's keyring subsystem. A local user could exploit this flaw to cause a denial of service (memory exhaustion). (CVE-2015-1333)
Andy Lutomirski discovered a flaw that allows user to cause the Linux kernel to ignore some NMIs (non-maskable interrupts). A local unprivileged user could exploit this flaw to potentially cause the system to miss important NMIs resulting in unspecified effects. (CVE-2015-3291)
Andy Lutomirski and Petr Matousek discovered that an NMI (non-maskable interrupt) that interrupts userspace and encounters an IRET fault is incorrectly handled by the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service (kernel OOPs), corruption, or potentially escalate privileges on the system. (CVE-2015-5157)
- Record
USN-2689-1- Updated
- 2026-11-02
OSVUSN-2690-1No score
linux-lts-vivid vulnerabilities
Andy Lutomirski discovered a flaw in the Linux kernel's handling of nested NMIs (non-maskable interrupts). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges. (CVE-2015-3290)
Colin King discovered a flaw in the add_key function of the Linux kernel's keyring subsystem. A local user could exploit this flaw to cause a denial of service (memory exhaustion). (CVE-2015-1333)
Andy Lutomirski discovered a flaw that allows user to cause the Linux kernel to ignore some NMIs (non-maskable interrupts). A local unprivileged user could exploit this flaw to potentially cause the system to miss important NMIs resulting in unspecified effects. (CVE-2015-3291)
Andy Lutomirski and Petr Matousek discovered that an NMI (non-maskable interrupt) that interrupts userspace and encounters an IRET fault is incorrectly handled by the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service (kernel OOPs), corruption, or potentially escalate privileges on the system. (CVE-2015-5157)
- Record
USN-2690-1- Updated
- 2026-11-02
OSVUSN-2700-1No score
linux vulnerabilities
Andy Lutomirski discovered a flaw in the Linux kernel's handling of nested NMIs (non-maskable interrupts). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges. (CVE-2015-3290)
Andy Lutomirski discovered a flaw that allows user to cause the Linux kernel to ignore some NMIs (non-maskable interrupts). A local unprivileged user could exploit this flaw to potentially cause the system to miss important NMIs resulting in unspecified effects. (CVE-2015-3291)
Andy Lutomirski and Petr Matousek discovered that an NMI (non-maskable interrupt) that interrupts userspace and encounters an IRET fault is incorrectly handled by the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service (kernel OOPs), corruption, or potentially escalate privileges on the system. (CVE-2015-5157)
- Record
USN-2700-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.redhat.com/show_bug.cgi?id=1243489
securityfocus.com/bid/76003
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit?id=810bc075f78ff2c221536eb3008eac6a492dba2d
github.com/torvalds/linux/commit/810bc075f78ff2c221536eb3008eac6a492dba2d
ubuntu.com/usn/USN-2689-1
Show 22 moreShow less
debian.org/security/2015/dsa-3313
kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6
openwall.com/lists/oss-security/2015/07/22/7
nvd.nist.gov/vuln/detail/CVE-2015-3291
security-tracker.debian.org/tracker/CVE-2015-3291
ubuntu.com/security/CVE-2015-3291
cve.org/CVERecord?id=CVE-2015-3291
Left out here: 61 versions. The JSON record has them.