CVE-2017-13695: Infoleak
Last updated 4 July 2026
Other sources
The acpinsevaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/acpica-unixto a version that resolves this vulnerability.Fixed in 20200925-8Fixed in 20250404-1Fixed in 20260408-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.12.9 - Compensating control
Mitigate local information disclosure and KASLR bypass risk by limiting access to the ability to trigger the vulnerable ACPI table evaluation (e.g., restrict untrusted/local users from using or providing crafted ACPI tables to the system).
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13695?
CVE-2017-13695 has a high severity rating due to its potential to expose sensitive kernel memory information to local users.
How do I fix CVE-2017-13695?
To fix CVE-2017-13695, update the Linux kernel to a version higher than 4.12.9 or apply the relevant patches from your distribution.
What versions of the Linux kernel are affected by CVE-2017-13695?
CVE-2017-13695 affects the Linux kernel versions up to and including 4.12.9.
Can CVE-2017-13695 allow an attacker to bypass security protections?
Yes, CVE-2017-13695 can allow local users to bypass Kernel Address Space Layout Randomization (KASLR) protections.
What is the impact of exploiting CVE-2017-13695?
Exploiting CVE-2017-13695 can lead to a kernel stack dump, potentially exposing sensitive data stored in kernel memory.