CVE-2015-7837 — MEDIUM (5.5)

Vulnerability Description

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.

CVSS Score

5.5

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Redhat	Enterprise Linux	7.0
Redhat	Enterprise Linux Desktop	7.0
Redhat	Enterprise Linux Server Aus	7.3
Redhat	Enterprise Linux Workstation	7.0
Redhat	Enterprise Mrg	2.0
Redhat	Kernel-Rt	7.0

Related Weaknesses (CWE)

CWE-254

References

http://rhn.redhat.com/errata/RHSA-2015-2152.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2411.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2015/10/15/6Mailing ListThird Party Advisory
http://www.securityfocus.com/bid/77097Third Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1272472Issue TrackingVendor Advisory
https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798Issue TrackingThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2152.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2411.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2015/10/15/6Mailing ListThird Party Advisory
http://www.securityfocus.com/bid/77097Third Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1272472Issue TrackingVendor Advisory
https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798Issue TrackingThird Party Advisory

FAQ

What is CVE-2015-7837?

CVE-2015-7837 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot res...

How severe is CVE-2015-7837?

CVE-2015-7837 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-7837?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Workstation, Redhat Enterprise Mrg.