fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 18, 2015 | Dec 17, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 29, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-develUpgrade kernelUpgrade kernel-uek-firmwareUpgrade kernel-uek-debug-develUpgrade kernel-uekUpgrade kernel-uek-docUpgrade dtrace-modulesUpgrade kernel-uek-debug | Sep 22, 2016 | Dec 28, 2015 |
| Redhat_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-rt-develNo solution existsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-traceUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-docUpgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-kdump-develUpgrade kernel-rt-trace-develUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-trace-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-kdumpUpgrade kernel-bootwrapperUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-ppc64Upgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade python-perf-debuginfo | Nov 4, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-98-virtualUpgrade linux-image-3.2.0-98-omapUpgrade linux-image-4.2.0-27-powerpc-smpUpgrade linux-image-3.16.0-60-powerpc64-smpUpgrade linux-image-4.2.0-27-lowlatencyUpgrade linux-image-3.13.0-77-powerpc-e500mcUpgrade linux-image-3.13.0-77-powerpc-smpUpgrade linux-image-3.19.0-49-powerpc64-smpUpgrade linux-image-4.2.0-27-generic-lpaeUpgrade linux-image-4.2.0-1022-raspi2Upgrade linux-image-3.16.0-60-lowlatencyUpgrade linux-image-4.2.0-27-genericUpgrade linux-image-3.2.0-98-highbankUpgrade linux-image-3.2.0-98-powerpc-smpUpgrade linux-image-3.19.0-49-powerpc64-embUpgrade linux-image-3.16.0-60-genericUpgrade linux-image-3.2.0-1476-omap4Upgrade linux-image-3.13.0-77-lowlatencyUpgrade linux-image-3.13.0-77-genericUpgrade linux-image-3.16.0-60-powerpc-smpUpgrade linux-image-3.13.0-77-powerpc64-embUpgrade linux-image-3.19.0-49-generic-lpaeUpgrade linux-image-4.2.0-27-powerpc64-smpUpgrade linux-image-3.2.0-98-generic-paeUpgrade linux-image-3.13.0-77-powerpc-e500Upgrade linux-image-3.16.0-60-powerpc-e500mcUpgrade linux-image-3.19.0-49-genericUpgrade linux-image-3.16.0-60-generic-lpaeUpgrade linux-image-4.2.0-27-powerpc-e500mcUpgrade linux-image-3.2.0-98-genericUpgrade linux-image-3.16.0-60-powerpc64-embUpgrade linux-image-4.2.0-27-powerpc64-embUpgrade linux-image-3.13.0-77-generic-lpaeUpgrade linux-image-3.2.0-98-powerpc64-smpUpgrade linux-image-3.13.0-77-powerpc64-smpUpgrade linux-image-3.19.0-49-powerpc-e500mcUpgrade linux-image-3.19.0-49-powerpc-smpUpgrade linux-image-3.19.0-49-lowlatency | Feb 2, 2016 | Dec 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub