CVE-2015-7837

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-254

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://rhn.redhat.com/errata/RHSA-2015-2152.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2411.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2015/10/15/6Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/77097Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1272472Issue Tracking, Vendor Advisory
https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798Issue Tracking, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2152.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-2411.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2015/10/15/6Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/77097Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1272472Issue Tracking, Vendor Advisory
https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798Issue Tracking, Third Party Advisory

Timeline

Published: Sep 19, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-783810.0ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via unspecified CVE-2015-78397.5SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/CVE-2015-78407.5The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrar CVE-2015-78419.8The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software CVE-2015-78427.1Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 CVE-2015-78438.8The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software befo CVE-2015-78447.5Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause t CVE-2015-78455.0The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with softw CVE-2015-78464.6Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physica CVE-2015-78475.5Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Servi CVE-2015-78487.5An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted privat CVE-2015-78498.8Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly exec