Goldwyn Rodrigues

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.39-rc1 **Description** The issue is related to the ocfs2 prepare page for write function in the Oracle Cluster File System 2 (OCFS2) subsystem, which does not properly handle holes that cross page boundaries. This allows local users to obtain potentially sensitive information from uninitialized disk locations by reading a file. **Recommendations** For versions prior to 2.6.39-rc1, update to version 2.6.39-rc1 or later to resolve the issue.