Information disclosure in Linux kernel - CVE-2017-13695

Vulnerability identifier: #VU64436

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-13695

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists in the Linux kernel's ACPI subsystem where a function does not flush the operand cache and causes a kernel stack dump. A local user can pass a specially crafted ACPI table to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism.

Linux kernel
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE CaaS Platform
SUSE Enterprise Storage
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Live Patching
openSUSE Leap
Fedora
kgraft-patch-4_4_180-94_164-default
kgraft-patch-4_4_180-94_164-default-debuginfo
kernel-livepatch-4_12_14-150000_150_92-default
kernel-livepatch-4_12_14-150000_150_92-default-debuginfo
kernel-livepatch-4_12_14-150100_197_114-default
kernel-ec2-devel
kernel-default-devel
kernel-ec2
kernel-ec2-base
kernel-default
kernel-source
kernel-syms
kernel-trace
kernel-trace-base
kernel-trace-devel
kernel-xen
kernel-xen-base
kernel-xen-devel
kernel-default-base
kernel-macros
kernel-devel
kernel-default-debugsource
kernel-default-debuginfo
kernel-default-base-debuginfo
gfs2-kmp-default-debuginfo
ocfs2-kmp-default-debuginfo
ocfs2-kmp-default
gfs2-kmp-default
dlm-kmp-default-debuginfo
dlm-kmp-default
cluster-md-kmp-default-debuginfo
cluster-md-kmp-default
kernel-default-man
kernel-default-kgraft
kernel
kernel-default-livepatch
kernel-docs
reiserfs-kmp-default-debuginfo
reiserfs-kmp-default
kernel-vanilla-debugsource
kernel-vanilla-debuginfo
kernel-vanilla-base-debuginfo
kernel-vanilla-base
kernel-obs-build-debugsource
kernel-obs-build
kernel-zfcpdump-debugsource
kernel-default-devel-debuginfo
kernel-zfcpdump-debuginfo
kernel-default-livepatch-devel
kernel-vanilla
kernel-vanilla-devel
kernel-vanilla-devel-debuginfo
kernel-vanilla-livepatch-devel
kernel-debug-base
kernel-debug-base-debuginfo
kernel-kvmsmall-base
kernel-kvmsmall-base-debuginfo
kernel-zfcpdump-man
acpica-tools

Install updates from vendor's website.

kgraft-patch-4_4_180-94_164-default - update to 1-4.3.2
kgraft-patch-4_4_180-94_164-default-debuginfo - update to 1-4.3.2
kernel-livepatch-4_12_14-150000_150_92-default - update to 1-150000.1.3.2
kernel-livepatch-4_12_14-150000_150_92-default-debuginfo - update to 1-150000.1.3.2
kernel-livepatch-4_12_14-150100_197_114-default - update to 1-150100.3.3.2
kernel-ec2-devel - update to 3.0.101-108.138.1
kernel-default-devel - addressed in versions 3.0.101-108.138.1, 4.4.121-92.175.2, 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-ec2 - update to 3.0.101-108.138.1
kernel-ec2-base - update to 3.0.101-108.138.1
kernel-default - addressed in versions 3.0.101-108.138.1, 4.4.121-92.175.2, 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-source - addressed in versions 3.0.101-108.138.1, 4.4.121-92.175.2, 4.4.180-94.164.2, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-syms - addressed in versions 3.0.101-108.138.1, 4.4.121-92.175.2, 4.4.180-94.164.2, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-trace - update to 3.0.101-108.138.1
kernel-trace-base - update to 3.0.101-108.138.1
kernel-trace-devel - update to 3.0.101-108.138.1
kernel-xen - update to 3.0.101-108.138.1
kernel-xen-base - update to 3.0.101-108.138.1
kernel-xen-devel - update to 3.0.101-108.138.1
kernel-default-base - addressed in versions 3.0.101-108.138.1, 4.4.121-92.175.2, 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-macros - addressed in versions 4.4.121-92.175.2, 4.4.180-94.164.2, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-devel - addressed in versions 4.4.121-92.175.2, 4.4.180-94.164.2, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-default-debugsource - addressed in versions 4.4.121-92.175.2, 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-default-debuginfo - addressed in versions 4.4.121-92.175.2, 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-default-base-debuginfo - addressed in versions 4.4.121-92.175.2, 4.4.180-94.164.3, 4.12.14-150100.197.114.2
gfs2-kmp-default-debuginfo - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
ocfs2-kmp-default-debuginfo - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
ocfs2-kmp-default - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
gfs2-kmp-default - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
dlm-kmp-default-debuginfo - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
dlm-kmp-default - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
cluster-md-kmp-default-debuginfo - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
cluster-md-kmp-default - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-default-man - addressed in versions 4.4.180-94.164.3, 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-default-kgraft - update to 4.4.180-94.164.3
kernel - addressed in versions 4.12.11-200.fc25, 4.12.11-300.fc26
kernel-default-livepatch - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-docs - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
reiserfs-kmp-default-debuginfo - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
reiserfs-kmp-default - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-vanilla-debugsource - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-vanilla-debuginfo - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-vanilla-base-debuginfo - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-vanilla-base - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-obs-build-debugsource - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-obs-build - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-zfcpdump-debugsource - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-default-devel-debuginfo - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-zfcpdump-debuginfo - addressed in versions 4.12.14-150000.150.92.2, 4.12.14-150100.197.114.2
kernel-default-livepatch-devel - update to 4.12.14-150100.197.114.2
kernel-vanilla - update to 4.12.14-150100.197.114.2
kernel-vanilla-devel - update to 4.12.14-150100.197.114.2
kernel-vanilla-devel-debuginfo - update to 4.12.14-150100.197.114.2
kernel-vanilla-livepatch-devel - update to 4.12.14-150100.197.114.2
kernel-debug-base - update to 4.12.14-150100.197.114.2
kernel-debug-base-debuginfo - update to 4.12.14-150100.197.114.2
kernel-kvmsmall-base - update to 4.12.14-150100.197.114.2
kernel-kvmsmall-base-debuginfo - update to 4.12.14-150100.197.114.2
kernel-zfcpdump-man - update to 4.12.14-150100.197.114.2
acpica-tools - addressed in versions 20180209-1.fc27, 20180209-1.fc28

• http://www.securityfocus.com/bid/100497
• https://github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5
• https://patchwork.kernel.org/patch/9850567/
• https://bugzilla.redhat.com/show_bug.cgi?id=1485349

• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Fedora 26 update for kernel
• Fedora 25 update for kernel
• Fedora 28 update for acpica-tools
• Fedora 27 update for acpica-tools