fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | May 15, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 15, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-tools | Aug 2, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 25, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Jul 2, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade kernel | Mar 12, 2020 | May 15, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | May 11, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 15, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 7, 2019 | May 15, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-docs | May 31, 2019 | May 15, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-4.4.0-157-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-157-generic-lpaeUpgrade linux-image-4.4.0-1117-raspi2Upgrade linux-image-4.4.0-157-powerpc-e500mcUpgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-5.0.0-23-genericUpgrade linux-image-oracleUpgrade linux-image-4.4.0-157-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-4.15.0-55-generic-lpaeUpgrade linux-image-4.4.0-157-genericUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-4.15.0-55-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-157-powerpc64-embUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-4.4.0-1052-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-55-genericUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1018-oracleUpgrade linux-image-4.15.0-1058-snapdragonUpgrade linux-image-4.4.0-1088-awsUpgrade linux-image-4.15.0-1041-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1050-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-4.4.0-157-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1039-kvmUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1037-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1044-awsUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-4.4.0-159-lowlatency | Jul 24, 2019 | May 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub