The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade acpica-unix | Jul 30, 2024 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-ori | Nov 30, 2017 | Aug 25, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-devel | Sep 24, 2019 | Aug 25, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 27, 2018 | Jul 19, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 19, 2017 |
| Suse | — | Upgrade kernel-traceUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-kgraftUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-vanillaUpgrade kernel-docsUpgrade kernel-zfcpdump-manUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-ec2-develUpgrade kernel-ec2-base | Aug 9, 2024 | Aug 25, 2017 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-34-genericUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1023-azureUpgrade linux-image-4.15.0-1021-awsUpgrade linux-image-4.15.0-34-generic-lpaeUpgrade linux-image-4.15.0-1021-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-34-snapdragonUpgrade linux-image-4.15.0-1019-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.15.0-34-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1022-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-4.4.0-1024-aws | Jul 5, 2018 | Aug 25, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub