fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfo | Apr 27, 2020 | May 15, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 15, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-headers | Aug 2, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perf | Sep 25, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo | Jul 2, 2019 | May 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-source | Mar 12, 2020 | May 15, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | May 11, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 15, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 7, 2019 | May 15, 2019 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-default-extra | May 31, 2019 | May 15, 2019 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-4.15.0-1041-raspi2Upgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1058-snapdragonUpgrade linux-image-4.4.0-1088-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1052-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1037-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1050-awsUpgrade linux-image-4.15.0-55-genericUpgrade linux-image-4.15.0-1018-oracleUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-4.15.0-1039-kvmUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-4.15.0-1044-awsUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-157-powerpc-smpUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-4.4.0-157-powerpc-e500mcUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-157-generic-lpaeUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-5.0.0-1012-azureUpgrade linux-image-4.4.0-157-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-157-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-55-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-23-genericUpgrade linux-image-4.4.0-157-genericUpgrade linux-image-4.4.0-157-powerpc64-embUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.15.0-55-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1117-raspi2Upgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-159-powerpc-smp | Jul 24, 2019 | May 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub