UBUNTU-CVE-2017-13695
The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
02 / AFFECTED SOFTWARE
Affected packages
46 explicit affected versions
9 explicit affected versions
6 explicit affected versions
61 explicit affected versions
191 explicit affected versions
12 explicit affected versions
17 explicit affected versions
1 explicit affected versions
8 explicit affected versions
12 explicit affected versions
7 explicit affected versions
1 explicit affected versions
15 explicit affected versions
4 explicit affected versions
12 explicit affected versions
23 explicit affected versions
54 explicit affected versions
49 explicit affected versions
13 explicit affected versions
14 explicit affected versions
19 explicit affected versions
7 explicit affected versions
76 explicit affected versions
51 explicit affected versions
21 explicit affected versions
7 explicit affected versions
35 explicit affected versions
12 explicit affected versions
26 explicit affected versions
11 explicit affected versions
39 explicit affected versions
3 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
05 / REFERENCES
Further evidence
- https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5
- https://patchwork.kernel.org/patch/9850567/
- https://ubuntu.com/security/CVE-2017-13695
- https://ubuntu.com/security/notices/USN-3696-1
- https://ubuntu.com/security/notices/USN-3696-2
- https://ubuntu.com/security/notices/USN-3762-1
- https://ubuntu.com/security/notices/USN-3762-2
- https://www.cve.org/CVERecord?id=CVE-2017-13695