A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade python-perf | Apr 27, 2020 | Nov 26, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Nov 26, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel | May 1, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | May 1, 2019 | Nov 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Apr 3, 2019 | Nov 26, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 12, 2019 | Nov 24, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 26, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-base | Jan 18, 2019 | Nov 26, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-oemUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1060-snapdragon | Feb 8, 2019 | Nov 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub