Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.
CVSS Details
- CVSS 3.1 Base Score: 2.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xen-develUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-xen | Dec 1, 2016 | Dec 21, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 21, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Dec 21, 2012 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-xen-extraUpgrade kernel-ppc64-baseUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade kernel-symsUpgrade kernel-ec2-baseUpgrade xen-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-xenUpgrade kernel-trace-extraUpgrade xen-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-pae-extraUpgrade xen-kmp-pae | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-354-ec2Upgrade linux-image-3.2.0-34-virtualUpgrade linux-image-3.5.0-21-omapUpgrade linux-image-3.2.0-1422-omap4Upgrade linux-image-2.6.32-49-sparc64-smpUpgrade linux-image-3.0.0-1221-omap4Upgrade linux-image-3.0.0-31-generic-paeUpgrade linux-image-3.2.0-34-powerpc64-smpUpgrade linux-image-3.5.0-21-highbankUpgrade linux-image-2.6.32-49-virtualUpgrade linux-image-2.6.32-49-ia64Upgrade linux-image-2.6.32-49-powerpc-smpUpgrade linux-image-2.6.32-49-386Upgrade linux-image-3.2.0-34-genericUpgrade linux-image-2.6.32-49-genericUpgrade linux-image-3.2.0-34-highbankUpgrade linux-image-3.0.0-31-genericUpgrade linux-image-2.6.32-49-sparc64Upgrade linux-image-3.5.0-22-genericUpgrade linux-image-3.5.0-21-powerpc-smpUpgrade linux-image-2.6.32-49-versatileUpgrade linux-image-3.2.0-34-omapUpgrade linux-image-2.6.32-49-lpiaUpgrade linux-image-3.5.0-21-powerpc64-smpUpgrade linux-image-3.0.0-31-powerpcUpgrade linux-image-3.0.0-31-powerpc64-smpUpgrade linux-image-3.5.0-216-omap4Upgrade linux-image-3.0.0-31-omapUpgrade linux-image-2.6.32-49-preemptUpgrade linux-image-3.0.0-31-powerpc-smpUpgrade linux-image-2.6.32-49-generic-paeUpgrade linux-image-3.0.0-31-virtualUpgrade linux-image-2.6.32-49-serverUpgrade linux-image-3.0.0-31-serverUpgrade linux-image-2.6.32-49-powerpc64-smpUpgrade linux-image-2.6.32-49-powerpcUpgrade linux-image-3.2.0-34-powerpc-smpUpgrade linux-image-3.5.0-21-genericUpgrade linux-image-3.2.0-34-generic-pae | Nov 8, 2024 | Dec 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub