Linux · Linux Kernel · CVE-2011-0463
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 2.6.39-rc1
**Description**
The issue is related to the ocfs2 prepare page for write function in the Oracle Cluster File System 2 (OCFS2) subsystem, which does not properly handle holes that cross page boundaries. This allows local users to obtain potentially sensitive information from uninitialized disk locations by reading a file.
**Recommendations**
For versions prior to 2.6.39-rc1, update to version 2.6.39-rc1 or later to resolve the issue.