CVE-2018-16862

A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.

Link	Resource
https://seclists.org/oss-sec/2018/q4/169	Mailing List Third Party Advisory
https://lore.kernel.org/patchwork/patch/1011367/	Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16862	Issue Tracking Third Party Advisory
http://www.securityfocus.com/bid/106009	Third Party Advisory VDB Entry
https://usn.ubuntu.com/3879-2/	Third Party Advisory
https://usn.ubuntu.com/3879-1/	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
https://usn.ubuntu.com/4094-1/
https://usn.ubuntu.com/4118-1/

Configuration 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

---

Published : 2018-11-26 07:29

Updated : 2019-04-01 09:29

---

NVD link : CVE-2018-16862

Mitre link : CVE-2018-16862

No products.

CWE-200