CVE-2017-13693
CVSS 3.0 Score 5.5 of 10 (medium)
Details
Published Aug 25, 2017
Updated: Dec 18, 2024
CWE ID 200
Summary
CVE-2017-13693 is a vulnerability affecting the Linux kernel through version 4.12.9. The issue lies in the acpi_ds_create_operands() function within the dsutils.c file in the acpica directory. This function fails to flush the operand cache, resulting in a kernel stack dump. Local users can take advantage of this vulnerability to access sensitive information from kernel memory, bypassing the KASLR (Kernel Address Space Layout Randomization) protection mechanism in older kernel versions (up to 4.9).
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.