PT-2019-2822 · Linux+5 · Linux Kernel+5
Publicado
2019-05-10
·
Atualizado
2023-03-01
·
CVE-2019-11833
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.1.2
Description
The issue is related to the fs/ext4/extents.c file in the Linux kernel, which does not properly clear unused memory regions in the extent tree block. This might allow local users to obtain sensitive information by reading uninitialized data in the filesystem. The vulnerability is associated with a lack of protection for internal data, which could be exploited to reveal protected information.
Recommendations
For Linux kernel versions through 5.1.2, update to a version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use of Uninitialized Resource
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu