The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade acpica-unixUpgrade linux | Jul 30, 2024 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-ori | Nov 30, 2017 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Sep 24, 2019 | Aug 25, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 27, 2018 | Jul 19, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 19, 2017 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-ec2Upgrade kernel-default-kgraftUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-baseUpgrade kernel-xenUpgrade kernel-vanilla-develUpgrade kernel-default-manUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-zfcpdump-manUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-docsUpgrade kernel-vanilla-baseUpgrade kernel-symsUpgrade kernel-ec2-baseUpgrade kernel-xen-baseUpgrade kernel-vanillaUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-xen-develUpgrade kernel-debug-baseUpgrade kernel-develUpgrade kernel-ec2-devel | Aug 9, 2024 | Aug 25, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1022-raspi2Upgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-34-lowlatencyUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1023-azureUpgrade linux-image-4.15.0-1021-awsUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-34-genericUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1019-gcpUpgrade linux-image-4.15.0-34-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1021-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-34-generic-lpae | Jul 5, 2018 | Aug 25, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub