A flaw was found in the Linux kernel when attempting to "punch a hole" in files existing on an ext4 filesystem. When punching holes into a file races with the page fault of the same area, it is possible that freed blocks remain referenced from page cache pages mapped to process' address space.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 1 | kernel | 2016-05-18 14:00 | ALAS-2016-703 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv2 | 4.7 | AV:L/AC:M/Au:N/C:N/I:C/A:N |
NVD | CVSSv2 | 1.9 | AV:L/AC:M/Au:N/C:N/I:N/A:P |
NVD | CVSSv3 | 5.1 | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |