fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | Apr 27, 2020 | May 15, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | May 15, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debug-devel | Aug 2, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perf | Sep 25, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perf | Jul 2, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 12, 2020 | May 15, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | May 11, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 15, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 7, 2019 | May 15, 2019 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-azure-base | May 31, 2019 | May 15, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-157-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-157-lowlatencyUpgrade linux-image-4.4.0-157-powerpc-e500mcUpgrade linux-image-5.0.0-23-genericUpgrade linux-image-oracleUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-4.4.0-157-genericUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-4.4.0-157-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-4.15.0-55-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1012-azureUpgrade linux-image-4.15.0-55-generic-lpaeUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1117-raspi2Upgrade linux-image-4.4.0-157-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1037-gcpUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-4.4.0-1050-awsUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1041-raspi2Upgrade linux-image-4.15.0-1044-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1052-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1018-oracleUpgrade linux-image-4.15.0-1039-kvmUpgrade linux-image-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1088-awsUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-157-powerpc-smpUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-4.15.0-1058-snapdragonUpgrade linux-image-azureUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-4.15.0-55-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04 | Jul 24, 2019 | May 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub