CVE-2012-4508

Published: 21 December 2012

Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.

From the Ubuntu security team

Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit this flaw to cause an information leak.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4508
• https://ubuntu.com/security/notices/USN-1645-1
• https://ubuntu.com/security/notices/USN-1644-1
• https://ubuntu.com/security/notices/USN-1671-1
• https://ubuntu.com/security/notices/USN-1704-1
• https://ubuntu.com/security/notices/USN-1719-1
• https://ubuntu.com/security/notices/USN-1720-1
• https://ubuntu.com/security/notices/USN-1726-1
• https://ubuntu.com/security/notices/USN-1673-1
• https://ubuntu.com/security/notices/USN-1899-1
• https://ubuntu.com/security/notices/USN-1900-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1071314