CVE-2012-4508
Priority
Medium
Description
Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16
allows local users to obtain sensitive information from a deleted file by
reading an extent that was not properly marked as uninitialized.
allows local users to obtain sensitive information from a deleted file by
reading an extent that was not properly marked as uninitialized.
Ubuntu-Description
Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem
that can expose stale data. An unprivileged user could exploit this flaw to
cause an information leak.
that can expose stale data. An unprivileged user could exploit this flaw to
cause an information leak.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4508
http://www.ubuntu.com/usn/usn-1645-1
http://www.ubuntu.com/usn/usn-1644-1
http://www.ubuntu.com/usn/usn-1671-1
http://www.ubuntu.com/usn/usn-1704-1
http://www.ubuntu.com/usn/usn-1719-1
http://www.ubuntu.com/usn/usn-1720-1
http://www.ubuntu.com/usn/usn-1726-1
http://www.ubuntu.com/usn/usn-1673-1
http://www.ubuntu.com/usn/usn-1645-1
http://www.ubuntu.com/usn/usn-1644-1
http://www.ubuntu.com/usn/usn-1671-1
http://www.ubuntu.com/usn/usn-1704-1
http://www.ubuntu.com/usn/usn-1719-1
http://www.ubuntu.com/usn/usn-1720-1
http://www.ubuntu.com/usn/usn-1726-1
http://www.ubuntu.com/usn/usn-1673-1
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1611.16) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-1606.8) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | needed |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (3.0.0-31.48~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.5.0-20.31~precise1) |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Patches:
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | needed |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-34.53) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-20.31) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.7.0-0.1) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.7.0-0.1) |
Patches:
| Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | Fixed by dee1f973ca341c266229faa5a1a5bb268bed3531 |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1422.29) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-216.23) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected |
| Ubuntu 13.10 (Saucy Salamander): | not-affected |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life, does not affect buildd) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.7~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |