CVEvulnerability

CVE-2019-11833

5.5 MEDIUM Published 2019-05-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-908

Description

fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.

Affected configurations

• linux linux kernel (<= 5.1.2) • fedoraproject fedora 29 • debian debian linux 8.0 • debian debian linux 9.0 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.04 • redhat enterprise linux 8.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux eus 8.1 • redhat enterprise linux eus 8.2 • redhat enterprise linux eus 8.4 • redhat enterprise linux eus 8.6 • redhat enterprise linux for real time 7 • redhat enterprise linux for real time 8.0 • redhat enterprise linux for real time for nfv 7 • redhat enterprise linux for real time for nfv 8.0 • redhat enterprise linux for real time for nfv tus 8.2 • redhat enterprise linux for real time for nfv tus 8.4 • redhat enterprise linux for real time for nfv tus 8.6 • redhat enterprise linux for real time tus 8.2 • redhat enterprise linux for real time tus 8.4 • redhat enterprise linux for real time tus 8.6 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 8.2 • redhat enterprise linux server aus 8.4 • redhat enterprise linux server aus 8.6 • redhat enterprise linux server tus 8.2 • redhat enterprise linux server tus 8.4 • redhat enterprise linux server tus 8.6 • redhat enterprise linux workstation 7.0

Related

Weakness · CWE (1)

  • CWE-908 Use of Uninitialized Resource weakness

References