The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade acpica-unix | Jul 30, 2024 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-oriUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug | Nov 30, 2017 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perf | Sep 24, 2019 | Aug 25, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 27, 2018 | Jul 19, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 19, 2017 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-ec2Upgrade kernel-vanilla-develUpgrade kernel-traceUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-default-kgraftUpgrade kernel-kvmsmall-baseUpgrade kernel-trace-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-xen-develUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-xen-baseUpgrade kernel-vanilla-base | Aug 9, 2024 | Aug 25, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.15.0-34-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1023-azureUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1019-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-34-generic-lpaeUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-4.15.0-1021-awsUpgrade linux-image-4.15.0-34-snapdragonUpgrade linux-image-azure-edgeUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-4.15.0-1021-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-4.15.0-1022-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-34-lowlatencyUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-generic-hwe-16.04 | Jul 5, 2018 | Aug 25, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub