First published: Sat May 11 2019(Updated: )
fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel-rt | <0:3.10.0-1062.rt56.1022.el7 | 0:3.10.0-1062.rt56.1022.el7 |
redhat/kernel | <0:3.10.0-1062.el7 | 0:3.10.0-1062.el7 |
redhat/kernel-rt | <0:4.18.0-147.rt24.93.el8 | 0:4.18.0-147.rt24.93.el8 |
redhat/kernel | <0:4.18.0-147.el8 | 0:4.18.0-147.el8 |
Linux Linux kernel | <=5.1.2 | |
Fedoraproject Fedora | =29 | |
Debian Debian Linux | =8.0 | |
Debian Debian Linux | =9.0 | |
Canonical Ubuntu Linux | =14.04 | |
Canonical Ubuntu Linux | =16.04 | |
Canonical Ubuntu Linux | =18.04 | |
Canonical Ubuntu Linux | =19.04 | |
Redhat Enterprise Linux | =8.0 | |
Redhat Enterprise Linux Desktop | =7.0 | |
Redhat Enterprise Linux Eus | =8.1 | |
Redhat Enterprise Linux Eus | =8.2 | |
Redhat Enterprise Linux Eus | =8.4 | |
Redhat Enterprise Linux Eus | =8.6 | |
Redhat Enterprise Linux For Real Time | =7 | |
Redhat Enterprise Linux For Real Time | =8.0 | |
Redhat Enterprise Linux For Real Time For Nfv | =7 | |
Redhat Enterprise Linux For Real Time For Nfv | =8.0 | |
Redhat Enterprise Linux For Real Time For Nfv Tus | =8.2 | |
Redhat Enterprise Linux For Real Time For Nfv Tus | =8.4 | |
Redhat Enterprise Linux For Real Time For Nfv Tus | =8.6 | |
Redhat Enterprise Linux For Real Time Tus | =8.2 | |
Redhat Enterprise Linux For Real Time Tus | =8.4 | |
Redhat Enterprise Linux For Real Time Tus | =8.6 | |
Redhat Enterprise Linux Server | =7.0 | |
Redhat Enterprise Linux Server Aus | =8.2 | |
Redhat Enterprise Linux Server Aus | =8.4 | |
Redhat Enterprise Linux Server Aus | =8.6 | |
Redhat Enterprise Linux Server Tus | =8.2 | |
Redhat Enterprise Linux Server Tus | =8.4 | |
Redhat Enterprise Linux Server Tus | =8.6 | |
Redhat Enterprise Linux Workstation | =7.0 | |
Google Android | ||
ubuntu/linux | <4.15.0-55.60 | 4.15.0-55.60 |
ubuntu/linux | <5.0.0-21.22 | 5.0.0-21.22 |
ubuntu/linux | <5.2~ | 5.2~ |
ubuntu/linux | <4.4.0-157.185 | 4.4.0-157.185 |
ubuntu/linux-aws | <4.15.0-1047.49 | 4.15.0-1047.49 |
ubuntu/linux-aws | <5.0.0-1011.12 | 5.0.0-1011.12 |
ubuntu/linux-aws | <4.4.0-1054.58 | 4.4.0-1054.58 |
ubuntu/linux-aws | <5.2~ | 5.2~ |
ubuntu/linux-aws | <4.4.0-1090.101 | 4.4.0-1090.101 |
ubuntu/linux-aws-5.0 | <5.2~ | 5.2~ |
ubuntu/linux-aws-hwe | <5.2~ | 5.2~ |
ubuntu/linux-aws-hwe | <4.15.0-1047.49~16.04.1 | 4.15.0-1047.49~16.04.1 |
ubuntu/linux-azure | <4.18.0-1025.27~18.04.1 | 4.18.0-1025.27~18.04.1 |
ubuntu/linux-azure | <5.0.0-1012.12 | 5.0.0-1012.12 |
ubuntu/linux-azure | <5.2~ | 5.2~ |
ubuntu/linux-azure | <4.15.0-1051.56 | 4.15.0-1051.56 |
ubuntu/linux-azure-5.3 | <5.2~ | 5.2~ |
ubuntu/linux-azure-edge | <4.18.0-1025.27~18.04.1 | 4.18.0-1025.27~18.04.1 |
ubuntu/linux-azure-edge | <5.2~ | 5.2~ |
ubuntu/linux-azure-edge | <4.15.0-1051.56 | 4.15.0-1051.56 |
ubuntu/linux-euclid | <5.2~ | 5.2~ |
ubuntu/linux-flo | <5.2~ | 5.2~ |
ubuntu/linux-gcp | <4.15.0-1037.39 | 4.15.0-1037.39 |
ubuntu/linux-gcp | <5.0.0-1011.11 | 5.0.0-1011.11 |
ubuntu/linux-gcp | <5.2~ | 5.2~ |
ubuntu/linux-gcp | <4.15.0-1037.39~16.04.1 | 4.15.0-1037.39~16.04.1 |
ubuntu/linux-gcp-5.3 | <5.2~ | 5.2~ |
ubuntu/linux-gcp-edge | <4.15.0-1037.39 | 4.15.0-1037.39 |
ubuntu/linux-gcp-edge | <5.2~ | 5.2~ |
ubuntu/linux-gke | <5.2~ | 5.2~ |
ubuntu/linux-gke-4.15 | <4.15.0-1037.39 | 4.15.0-1037.39 |
ubuntu/linux-gke-4.15 | <5.2~ | 5.2~ |
ubuntu/linux-gke-5.0 | <5.2~ | 5.2~ |
ubuntu/linux-goldfish | <5.2~ | 5.2~ |
ubuntu/linux-grouper | <5.2~ | 5.2~ |
ubuntu/linux-hwe | <5.0.0-23.24~18.04.1 | 5.0.0-23.24~18.04.1 |
ubuntu/linux-hwe | <5.2~ | 5.2~ |
ubuntu/linux-hwe | <4.15.0-55.60~16.04.2 | 4.15.0-55.60~16.04.2 |
ubuntu/linux-hwe-edge | <5.2~ | 5.2~ |
ubuntu/linux-hwe-edge | <4.15.0-55.60~16.04.2 | 4.15.0-55.60~16.04.2 |
ubuntu/linux-kvm | <4.15.0-1039.39 | 4.15.0-1039.39 |
ubuntu/linux-kvm | <5.0.0-1011.12 | 5.0.0-1011.12 |
ubuntu/linux-kvm | <5.2~ | 5.2~ |
ubuntu/linux-kvm | <4.4.0-1052.59 | 4.4.0-1052.59 |
ubuntu/linux-lts-trusty | <5.2~ | 5.2~ |
ubuntu/linux-lts-utopic | <5.2~ | 5.2~ |
ubuntu/linux-lts-vivid | <5.2~ | 5.2~ |
ubuntu/linux-lts-wily | <5.2~ | 5.2~ |
ubuntu/linux-lts-xenial | <4.4.0-164.192~14.04.1 | 4.4.0-164.192~14.04.1 |
ubuntu/linux-lts-xenial | <5.2~ | 5.2~ |
ubuntu/linux-maguro | <5.2~ | 5.2~ |
ubuntu/linux-mako | <5.2~ | 5.2~ |
ubuntu/linux-manta | <5.2~ | 5.2~ |
ubuntu/linux-oem | <4.15.0-1050.57 | 4.15.0-1050.57 |
ubuntu/linux-oem | <4.15.0-1050.57 | 4.15.0-1050.57 |
ubuntu/linux-oem | <4.15.0-1050.57 | 4.15.0-1050.57 |
ubuntu/linux-oem | <5.2~ | 5.2~ |
ubuntu/linux-oem-5.4 | <5.2~ | 5.2~ |
ubuntu/linux-oem-osp1 | <5.0.0-1015.16 | 5.0.0-1015.16 |
ubuntu/linux-oem-osp1 | <5.0.0-1018.20 | 5.0.0-1018.20 |
ubuntu/linux-oem-osp1 | <5.2~ | 5.2~ |
ubuntu/linux-oracle | <4.15.0-1018.20 | 4.15.0-1018.20 |
ubuntu/linux-oracle | <4.15.0-1018.20 | 4.15.0-1018.20 |
ubuntu/linux-oracle | <5.2~ | 5.2~ |
ubuntu/linux-oracle | <4.15.0-1018.20~16.04.1 | 4.15.0-1018.20~16.04.1 |
ubuntu/linux-oracle-5.0 | <5.2~ | 5.2~ |
ubuntu/linux-raspi2 | <4.15.0-1041.44 | 4.15.0-1041.44 |
ubuntu/linux-raspi2 | <5.0.0-1013.13 | 5.0.0-1013.13 |
ubuntu/linux-raspi2 | <5.2~ | 5.2~ |
ubuntu/linux-raspi2 | <4.4.0-1117.126 | 4.4.0-1117.126 |
ubuntu/linux-raspi2-5.3 | <5.2~ | 5.2~ |
ubuntu/linux-snapdragon | <4.15.0-1058.64 | 4.15.0-1058.64 |
ubuntu/linux-snapdragon | <5.0.0-1017.18 | 5.0.0-1017.18 |
ubuntu/linux-snapdragon | <5.2~ | 5.2~ |
ubuntu/linux-snapdragon | <4.4.0-1121.127 | 4.4.0-1121.127 |
debian/linux | 4.19.249-2 4.19.304-1 5.10.209-2 5.10.205-2 6.1.76-1 6.1.85-1 6.6.15-2 6.7.12-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)