The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade acpica-unix | Jul 30, 2024 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-oriUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Jun 17, 2020 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo | Apr 16, 2020 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Sep 24, 2019 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade bpftool | Jan 3, 2020 | Aug 25, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 19, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub