CVE-2015-2666

Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows…

published May 27, 2015

CVSS
—
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Published
2015-05-27T10:00Z
EPSS history
Timeline
  • 27 MAY 10:00Z
    Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows…
    cvelistv5