Unrated severityNVD Advisory· Published Aug 31, 2015· Updated Jun 17, 2026

CVE-2015-3291

Description

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issuing a syscall instruction, and triggering an NMI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=4.1.5
- (no CPE)range: <4.1.6

Patches

Vulnerability mechanics

References

www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6nvdVendor Advisory
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvd
www.debian.org/security/2015/dsa-3313nvd
www.openwall.com/lists/oss-security/2015/07/22/7nvd
www.securityfocus.com/bid/76003nvd
www.ubuntu.com/usn/USN-2687-1nvd
www.ubuntu.com/usn/USN-2688-1nvd
www.ubuntu.com/usn/USN-2689-1nvd
www.ubuntu.com/usn/USN-2690-1nvd
www.ubuntu.com/usn/USN-2691-1nvd
bugzilla.redhat.com/show_bug.cginvd
github.com/torvalds/linux/commit/810bc075f78ff2c221536eb3008eac6a492dba2dnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000