CVE-2015-7837
Fixed in a distro release EPSS <1%
The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.
Products: redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server_aus, redhat enterprise_linux_workstation, redhat enterprise_mrg, redhat kernel-rt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.5.1-1 |
| Debian 13 | linux | 4.5.1-1 |
| Debian 14 | linux | 4.5.1-1 |
| Red Hat Enterprise Linux 7 | kernel | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-abi-whitelists | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-bootwrapper | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-debuginfo | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-devel | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64 | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64le | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-s390x | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-x86_64 | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-devel | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-doc | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-headers | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-debuginfo | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-devel | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-debuginfo | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs-devel | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | perf | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | perf-debuginfo | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | python-perf | 0:3.10.0-327.el7 |
| Red Hat Enterprise Linux 7 | python-perf-debuginfo | 0:3.10.0-327.el7 |
| Red Hat rhel extras rt 7 | kernel-rt | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-debuginfo | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-devel | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo-common-x86_64 | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-devel | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-doc | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-debuginfo | 0:3.10.0-327.rt56.204.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-devel | 0:3.10.0-327.rt56.204.el7 |
| Ubuntu 14.04 LTS | linux-lts-vivid | 3.19.0-74.82~14.04.1 |
| Ubuntu 14.04 LTS | linux-lts-xenial | 4.4.0-93.116~14.04.1 |
| Ubuntu 16.04 LTS | linux | 4.4.0-93.116 |
| Ubuntu 16.04 LTS | linux-aws | 4.4.0-1032.41 |
| Ubuntu 16.04 LTS | linux-gke | 4.4.0-1028.28 |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1071.79 |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1073.78 |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-gkeop | no fix |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux | no fix |
| Ubuntu 22.04 LTS | linux-aws | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-azure | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-gcp | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-gke | no fix |
| Ubuntu 22.04 LTS | linux-gkeop | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-ibm | no fix |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-intel-iotg | no fix |
| Ubuntu 22.04 LTS | linux-kvm | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | no fix |
| Ubuntu 22.04 LTS | linux-oracle | no fix |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-raspi | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | no fix |
| Ubuntu 24.04 LTS | linux | no fix |
| Ubuntu 24.04 LTS | linux-aws | no fix |
| Ubuntu 24.04 LTS | linux-aws-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-aws-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-aws-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-azure | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-azure-nvidia | no fix |
| Ubuntu 24.04 LTS | linux-azure-nvidia-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-gcp | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-gke | no fix |
| Ubuntu 24.04 LTS | linux-gkeop | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-ibm | no fix |
| Ubuntu 24.04 LTS | linux-intel | no fix |
| Ubuntu 24.04 LTS | linux-lowlatency | no fix |
| Ubuntu 24.04 LTS | linux-lowlatency-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.8 | no fix |
| Ubuntu 24.04 LTS | linux-oracle | no fix |
| Ubuntu 24.04 LTS | linux-oracle-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-oracle-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-raspi | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu 24.04 LTS | linux-realtime | no fix |
| Ubuntu 24.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | no fix |
| Ubuntu 24.04 LTS | linux-vmware | no fix |
| Ubuntu 24.04 LTS | linux-xilinx | no fix |
| Ubuntu 25.10 | linux | no fix |
| Ubuntu 25.10 | linux-aws | no fix |
| Ubuntu 25.10 | linux-azure | no fix |
| Ubuntu 25.10 | linux-azure-fde | no fix |
| Ubuntu 25.10 | linux-gcp | no fix |
| Ubuntu 25.10 | linux-oracle | no fix |
| Ubuntu 25.10 | linux-raspi | no fix |
| Ubuntu 25.10 | linux-realtime | no fix |
| Ubuntu 25.10 | linux-riscv | no fix |
| Ubuntu 26.04 LTS | linux | no fix |
| Ubuntu 26.04 LTS | linux-aws | no fix |
| Ubuntu 26.04 LTS | linux-azure | no fix |
| Ubuntu 26.04 LTS | linux-azure-fde | no fix |
| Ubuntu 26.04 LTS | linux-gcp | no fix |
| Ubuntu 26.04 LTS | linux-gke | no fix |
| Ubuntu 26.04 LTS | linux-ibm | no fix |
| Ubuntu 26.04 LTS | linux-nvidia | no fix |
| Ubuntu 26.04 LTS | linux-nvidia-bos | no fix |
| Ubuntu 26.04 LTS | linux-oem-7.0 | no fix |
| Ubuntu 26.04 LTS | linux-oracle | no fix |
| Ubuntu 26.04 LTS | linux-raspi | no fix |
| Ubuntu 26.04 LTS | linux-realtime | no fix |
| Ubuntu 26.04 LTS | linux-riscv | no fix |
| Ubuntu 26.10 | linux | no fix |
| Ubuntu 26.10 | linux-aws | no fix |
| Ubuntu 26.10 | linux-azure | no fix |
| Ubuntu 26.10 | linux-azure-fde | no fix |
| Ubuntu 26.10 | linux-gcp | no fix |
| Ubuntu 26.10 | linux-oracle | no fix |
| Ubuntu 26.10 | linux-raspi | no fix |
| Ubuntu 26.10 | linux-realtime | no fix |
| Ubuntu 26.10 | linux-riscv | no fix |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | no fix |
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | no fix |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | no fix |
| Ubuntu Pro 20.04 LTS | linux | no fix |
| Ubuntu Pro 20.04 LTS | linux-aws | no fix |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-azure | no fix |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-bluefield | no fix |
| Ubuntu Pro 20.04 LTS | linux-gcp | no fix |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-ibm | no fix |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-iot | no fix |
| Ubuntu Pro 20.04 LTS | linux-kvm | no fix |
| Ubuntu Pro 20.04 LTS | linux-lowlatency-hwe-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-oracle | no fix |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-raspi | no fix |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-xilinx-zynqmp | no fix |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | no fix |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | no fix |