What’s Vulnerable › Vulnerabilities

CVE-2017-11473

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-20 · updated 2026-06-17
• Weakness: CWE-120

Description

Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.

Affected products

• Canonical Ubuntu Linux: 14.04
• Linux kernel: before 3.2.95; from 3.3 before 3.16.50; from 3.17 before 3.18.63; from 3.19 before 4.1.44; from 4.2 before 4.4.79; from 4.5 before 4.9.40 — fixed in 3.16.50, 3.18.63, 3.2.95, 4.1.44, 4.12.4, 4.4.79

How to fix

Upgrade to a fixed version: Linux kernel 3.16.50, 3.18.63, 3.2.95, 4.1.44. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/100010
• https://access.redhat.com/errata/RHSA-2018:0654
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=70ac67826602edf8c0ccb413e5ba7eacf597a60c
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=96301209473afd3f2f274b91cb7082d161b9be65
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=dad5ab0db8deac535d03e3fe3d8f2892173fa6a4
• https://source.android.com/security/bulletin/pixel/2018-01-01
• https://usn.ubuntu.com/3754-1/
• http://www.securityfocus.com/bid/100010
• https://access.redhat.com/errata/RHSA-2018:0654
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=70ac67826602edf8c0ccb413e5ba7eacf597a60c
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=96301209473afd3f2f274b91cb7082d161b9be65
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=dad5ab0db8deac535d03e3fe3d8f2892173fa6a4

Get alerted when CVE-2017-11473 or the next vulnerability affects your stack