PT-2012-5450 · Linux+3 · Linux Kernel+3

Dimitry Monakhov · Published 2012-12-04 · Updated 2023-02-13 · CVE-2012-4508

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4.16

Description A race condition exists in the fs/ext4/extents.c file of the Linux kernel, allowing local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.

Recommendations For Linux kernel versions prior to 3.4.16, update to version 3.4.16 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CESA-2013_0496

CVE-2012-4508

DSA-2668-1

RHSA-2012:1491

RHSA-2012:1540

RHSA-2012_1540

RHSA-2013:0496

RHSA-2013:1519

RHSA-2013:1783

RHSA-2013_0496

SUSE-SU-2015:0481-1

USN-1644-1

USN-1645-1

USN-1671-1

USN-1673-1

USN-1704-1

USN-1719-1

USN-1720-1

USN-1726-1

USN-1899-1

USN-1900-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 33

• https://github.com/torvalds/linux/commit/dee1f973ca341c266229faa5a1a5bb268bed3531 · Patch
• https://ubuntu.com/security/notices/USN-1719-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4508 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1704-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1720-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1645-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1900-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-4508 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1899-1 · Vendor Advisory
• https://suse.com/support/update/announcement/2012/suse-su-20121679-1.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091110.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-2520.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1519.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0496.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-4508 · Security Note