CVE-2017-11473
HighBuffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.
CVSS 3.1 score
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness type
CWE-120CVE-2017-11473 is classified as CWE-120
See CWE-120 on MITRE CWE for full details on this weakness type.
References
The following references provide additional information about CVE-2017-11473 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
Securityfocushttp://www.securityfocus.com/bid/100010Third Party Advisory VDB Entry
-
Third Party Advisory
-
Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3754-1/Third Party Advisory
-
PatchKernel patch commithttps://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=70ac67826602edf8c0ccb413e5ba7eacf597a60c
-
PatchKernel patch commithttps://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=96301209473afd3f2f274b91cb7082d161b9be65
-
PatchKernel patch commithttps://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=dad5ab0db8deac535d03e3fe3d8f2892173fa6a4
Frequently asked questions
-
What is CVE-2017-11473?
CVE-2017-11473 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . CVE-2017-11473 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2017-11473?
CVE-2017-11473 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. -
Is there a patch available for CVE-2017-11473?
No patch is currently available for CVE-2017-11473. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
-
Is CVE-2017-11473 actively exploited?
No — CVE-2017-11473 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.