A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Apr 27, 2020 | Nov 26, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Nov 26, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debug-devel | May 1, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headers | May 1, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perf | Apr 3, 2019 | Nov 26, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 12, 2019 | Nov 24, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 26, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | Jan 18, 2019 | Nov 26, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-58-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-awsUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gke | Feb 8, 2019 | Nov 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub