CVE-2015-3290: arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espf...

Security readout for executives and security teams

CVE-2015-3290 is a Linux kernel local privilege escalation issue on x86_64 systems. A local user could abuse a narrow nested NMI handling flaw to gain higher privileges. It matters most on systems where untrusted users or workloads can run code locally. Exposure is likely limited to x86_64 Linux systems running kernels before 4.1.6 or vendor kernels lacking the relevant backport. Internet-only attackers are not indicated by the provided sources; local code execution is required. Prioritize remediation where users, tenants, containers, or applications can execute local code. This is not described as remote initial access, but it can turn a foothold into full system compromise. Mitigation focus: Update Linux kernels to 4.1.6 or a vendor-fixed supported package.; Apply relevant Ubuntu, Debian, Red Hat, or openSUSE kernel advisories where applicable.; Prioritize multi-user hosts and systems running untrusted local workloads..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.