The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade preload-kmp-desktopUpgrade kernel-xen-baseUpgrade kernel-vanilla-baseUpgrade kernel-debug-baseUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-desktop-develUpgrade preload-kmp-defaultUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-desktop-baseUpgrade kernel-defaultUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-vanilla-develUpgrade kernel-pae-baseUpgrade kernel-vanillaUpgrade kernel-default-baseUpgrade kernel-desktopUpgrade kernel-pae-devel | Feb 17, 2015 | Jun 7, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-itanium | Nov 8, 2024 | Jun 8, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub