PT-2003-1974 · Linux · Linux Kernel

Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-0956

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.4.22

Description The issue is related to multiple race conditions in the handling of O DIRECT in the Linux kernel. This could lead to stale data being returned from the disk when handling sparse files, or incorrect data being returned when a file is truncated as it is being read. As a result, local users might obtain sensitive data that was originally owned by other users.

Recommendations For Linux kernel versions prior to 2.4.22, update to version 2.4.22 or later to resolve the issue.

Fix

Related Identifiers

CVE-2003-0956

Affected Products

Linux Kernel

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-0956 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42942 · Note
• http://linux.bkbits.net:8080/linux-2.4/cset%403ef33d95ym_22QH2xwhDMt264M55Fg · Note