Description
The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.
References (18)
Core 18
Core References
Patch x_refsource_confirm
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207463
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11701
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2007-0014.html
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:025
Vendor Advisory vendor-advisory
x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_79_kernel.html
Vendor Advisory x_refsource_confirm
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=152becd26e0563aefdbc4fd1fe491928efe92d1f
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:012
Vendor Advisory x_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/21522
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23384
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23752
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24206
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23474
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.us.debian.org/security/2006/dsa-1233
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23370
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23997
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-395-1
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/31376
Scores
EPSS
0.0040
EPSS Percentile
33.2%
Details
Status
published
Products (11)
linux/linux_kernel
2.6.0 (12 CPE variants)
linux/linux_kernel
2.6.1 (4 CPE variants)
linux/linux_kernel
2.6.2 (4 CPE variants)
linux/linux_kernel
2.6.3 (5 CPE variants)
linux/linux_kernel
2.6.4 (4 CPE variants)
linux/linux_kernel
2.6.5 (4 CPE variants)
linux/linux_kernel
2.6.6 (4 CPE variants)
linux/linux_kernel
2.6.7 (4 CPE variants)
linux/linux_kernel
2.6.8 (5 CPE variants)
linux/linux_kernel
2.6.8.1
... and 1 more
Published
Oct 12, 2006
Tracked Since
Feb 18, 2026