The ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain potentially sensitive information from uninitialized disk locations by reading a file.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-10-powerpc-smp | Nov 8, 2024 | Apr 10, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub