The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade acpica-unix | Jul 30, 2024 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-oriUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools | Nov 30, 2017 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 24, 2019 | Aug 25, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 27, 2018 | Jul 19, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 19, 2017 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-vanilla-baseUpgrade kernel-zfcpdump-manUpgrade kernel-vanillaUpgrade kernel-ec2-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-symsUpgrade kernel-debug-baseUpgrade kernel-xen-develUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-vanilla-develUpgrade kernel-traceUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-default-kgraftUpgrade kernel-default-manUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-livepatch-devel | Aug 9, 2024 | Aug 25, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1022-raspi2Upgrade linux-image-4.4.0-1024-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-4.15.0-34-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-4.15.0-34-genericUpgrade linux-image-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-4.15.0-1021-awsUpgrade linux-image-4.15.0-1023-azureUpgrade linux-image-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1019-gcpUpgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-4.4.0-130-genericUpgrade linux-image-4.15.0-1021-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-34-snapdragonUpgrade linux-image-4.15.0-34-generic-lpae | Jul 5, 2018 | Aug 25, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub