Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-11472 Details

Description

The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3b2d69114fefa474fca542e51119036dceb4aa6f CVEIssue TrackingPatchThird Party Advisory
https://github.com/acpica/acpica/commit/a23325b2e583556eae88ed3f764e457786bf4df6 CVEIssue TrackingPatchThird Party Advisory
https://github.com/torvalds/linux/commit/3b2d69114fefa474fca542e51119036dceb4aa6f CVEIssue TrackingPatchThird Party Advisory
https://usn.ubuntu.com/3619-1/ CVE
https://usn.ubuntu.com/3619-2/ CVE

see all 12 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-755Improper Handling of Exceptional Conditions[email protected]

Affected Products

ProductVersions
linux linux kernel
<= 4.11.9

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

9 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-11472
NVD Published Date:
Jul 20, 2017
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2017-11472 Details - Not Deferred