Improper access control in Linux kernel - CVE-2017-11472
Published: April 9, 2018 / Updated: April 11, 2018
Vulnerability identifier: #VU11763
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-11472
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to obtain potentially sensitive information and bypass security restrictions on the target system.
The weakness exists in the acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c due to it does not flush the operand cache and causes a kernel stack dump. A local attacker can submit a specially crafted ACPI table, gain access to potentially sensitive information from kernel memory and bypass the KASLR protection mechanism.
Affected software
Linux kernel
SUSE Linux
SUSE Linux
How to mitigate CVE-2017-11472
Update to version 4.12.