A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfo | Apr 27, 2020 | Nov 26, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Nov 26, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade kernel | May 1, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | May 1, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo | Apr 3, 2019 | Nov 26, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 12, 2019 | Nov 24, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 26, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azure | Jan 18, 2019 | Nov 26, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1075-awsUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-oracleUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-azureUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1055-azure | Feb 8, 2019 | Nov 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub