PT-2017-13024 · Linux +3 · Linux Kernel +3

🗓️ 25 Aug 2017 00:00:00Reported by Positive TechnologiesType

ACPI ns_evaluate() in kernel fails to flush the operand cache, risking disclosure and kaslr bypass.

Reporter	Title	Published	Views	Family All 14101
altlinux	Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.47-alt0.M70P.1	8 Dec 201700:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.118-alt1	30 May 202200:00	–	altlinux
altlinux	Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.46-alt0.M70P.1	16 Nov 201700:00	–	altlinux
attackerkb	CVE-2022-41850	30 Sep 202206:15	–	attackerkb
attackerkb	CVE-2022-1516	5 May 202215:15	–	attackerkb
attackerkb	CVE-2017-16650	7 Nov 201723:29	–	attackerkb
attackerkb	CVE-2022-1048	29 Apr 202216:15	–	attackerkb
attackerkb	CVE-2017-17449	7 Dec 201700:29	–	attackerkb
attackerkb	CVE-2021-33656	18 Jul 202215:15	–	attackerkb
attackerkb	CVE-2022-44032	30 Oct 202201:15	–	attackerkb

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377
github	www.github.com/es0j/CVE-2023-0045
github	www.github.com/GeneBlue/CVE-2017-10661_POC
github	www.github.com/ASkyeye/CVE-2023-0045
github	www.github.com/xkaneiki/CVE-2022-1011
github	www.github.com/acpica/acpica/pull/296/commits/37f2c716f2c6ab14c3ba557a539c3ee3224931b5

15 Feb 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.15.5 - 9.8

CVSS 28.3

CVSS 37.5 - 7.8

EPSS0.13378

SSVC