The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade sys-kernel/pegasos-dev-sources.Upgrade sys-kernel/wolk-sources.Upgrade sys-kernel/hardened-sources.Upgrade sys-kernel/selinux-sources.Upgrade sys-kernel/alpha-sources.Upgrade sys-kernel/vanilla-sources.Upgrade sys-kernel/rsbac-dev-sources.Upgrade sys-kernel/hardened-dev-sources.Upgrade sys-kernel/openmosix-sources.Upgrade sys-kernel/hppa-sources.Upgrade sys-kernel/vserver-sources.Upgrade sys-kernel/gs-sources.Upgrade sys-kernel/grsec-sources.Upgrade sys-kernel/rsbac-sources.Upgrade sys-kernel/ck-sources.Upgrade sys-kernel/hppa-dev-sources.Upgrade sys-kernel/uclinux-sources.Upgrade sys-kernel/compaq-sources.Upgrade sys-kernel/mips-sources.Upgrade sys-kernel/ia64-sources.Upgrade sys-kernel/planet-ccrma-sources.Upgrade sys-kernel/mm-sources.Upgrade sys-kernel/development-sources.Upgrade sys-kernel/usermode-sources.Upgrade sys-kernel/xbox-sources.Upgrade sys-kernel/pegasos-sources.Upgrade sys-kernel/gaming-sources.Upgrade sys-kernel/win4lin-sources.Upgrade sys-kernel/gentoo-sources.Upgrade sys-kernel/aa-sources.Upgrade sys-kernel/xfs-sources.Upgrade sys-kernel/sparc-sources.Upgrade sys-kernel/gentoo-dev-sources.Upgrade sys-kernel/pac-sources.Upgrade sys-kernel/ppc64-sources.Upgrade sys-kernel/ppc-sources. | Oct 30, 2017 | Jun 1, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub