CVE-2012-4508

Published: 21 December 2012

Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.

From the Ubuntu security team

Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit this flaw to cause an information leak.

Priority

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







	Patches: Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by dee1f973ca341c266229faa5a1a5bb268bed3531
linux-armadaxp Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







	This package is not directly supported by the Ubuntu Security Team
linux-aws Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-ec2 Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-flo Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-fsl-imx51 Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-gke Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-goldfish Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-grouper Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-hwe Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-hwe-edge Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-linaro-omap Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-linaro-shared Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-linaro-vexpress Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-backport-maverick Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-backport-natty Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-backport-oneiric Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-quantal Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-raring Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-trusty Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-utopic Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-vivid Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-wily Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-lts-xenial Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-maguro Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-mako Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-manta Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-mvl-dove Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-qcm-msm Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-raspi2 Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-snapdragon Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)







linux-ti-omap4 Launchpad, Ubuntu, Debian	Upstream	Released (3.7~rc3)

References

Bugs

https://launchpad.net/bugs/1071314

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›