CVE-2018-16862CWE-200

A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal)

Medium · published November 26, 2018

CVSS v3.0
5.3
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2018-11-26T19:00Z
EPSS history
Timeline
  • 26 NOV 19:00Z
    A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal)
    cvelistv5