fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools | Apr 27, 2020 | May 15, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 15, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-headers | Aug 2, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headers | Sep 25, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-devel | Jul 2, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-devel | Mar 12, 2020 | May 15, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | May 11, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 15, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 7, 2019 | May 15, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-obs-build | May 31, 2019 | May 15, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-1088-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-4.15.0-1037-gcpUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-4.15.0-1044-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1052-kvmUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-55-genericUpgrade linux-image-gcpUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1018-oracleUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1050-awsUpgrade linux-image-4.15.0-1041-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-4.4.0-157-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1039-kvmUpgrade linux-image-4.15.0-1058-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-4.4.0-157-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-157-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-4.4.0-157-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-55-lowlatencyUpgrade linux-image-5.0.0-23-genericUpgrade linux-image-4.15.0-55-generic-lpaeUpgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-4.4.0-157-generic-lpaeUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-157-powerpc-e500mcUpgrade linux-image-4.4.0-157-powerpc64-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1117-raspi2Upgrade linux-image-virtualUpgrade linux-image-powerpc-e500mc | Jul 24, 2019 | May 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub