CVE-2019-11833
published 2019-05-15CVE-2019-11833: fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to…
PriorityP423medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.65%
50.3th percentile
fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
Affected
40 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | linux | < linux 4.19.37-4 (bookworm) | linux 4.19.37-4 (bookworm) |
| fedoraproject | fedora | — | — |
| android | — | — | |
| linux | linux_kernel | <= 5.1.2 | — |
| linux | linux_kernel | >= 0 < 4.19.37-4 | 4.19.37-4 |
| linux | linux_kernel | >= 0 < 4.19.37-4 | 4.19.37-4 |
| linux | linux_kernel | >= 0 < 4.19.37-4 | 4.19.37-4 |
| linux | linux_kernel | >= 0 < 4.19.37-4 | 4.19.37-4 |
| linux | linux_kernel | >= 0 < 4.4.0-157.185 | 4.4.0-157.185 |
| linux | linux_kernel | >= 0 < 4.15.0-55.60 | 4.15.0-55.60 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_for_real_time | — | — |
| redhat | enterprise_linux_for_real_time | — | — |
| redhat | enterprise_linux_for_real_time_for_nfv | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv8.1HIGH
vendor_ubuntu8.1HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2019-11833: ext4 filesystem
vendor_android·2019-11-01·CVSS 5.5
CVE-2019-11833 [MEDIUM] CVE-2019-11833: ext4 filesystem
Android Security Bulletin 2019-11-01
CVE: CVE-2019-11833
Severity: MEDIUM
Type: ID
Component: ext4 filesystem
References: A-133041647
Upstream
kernel
Ubuntu
Linux kernel (AWS) vulnerabilities
vendor_ubuntu·2019-09-02·CVSS 3.3
CVE-2018-13053 [LOW] Linux kernel (AWS) vulnerabilities
Title: Linux kernel (AWS) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the alarmtimer implementation in the Linux kernel
contained an integer overflow vulnerability. A local attacker could use
this to cause a denial of service. (CVE-2018-13053)
Wen Xu discovered that the XFS filesystem implementation in the Linux
kernel did not properly track inode validations. An attacker could use this
to construct a malicious XFS image that, when mounted, could cause a denial
of service (system crash). (CVE-2018-13093)
Wen Xu discovered that the f2fs file system implementation in the Linux
kernel did not properly validate metadata. An attacker could use this to
construct a malicious f2fs image that, when mounted, could cause a denial
of serv
Ubuntu
Linux kernel (Xenial HWE) vulnerabilities
vendor_ubuntu·2019-08-13·CVSS 6.8
CVE-2018-5383 [MEDIUM] Linux kernel (Xenial HWE) vulnerabilities
Title: Linux kernel (Xenial HWE) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
USN-4095-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu
14.04 ESM.
Eli Biham and Lior Neumann discovered that the Bluetooth implementation in
the Linux kernel did not properly validate elliptic curve parameters during
Diffie-Hellman key exchange in some situations. An attacker could use this
to expose sensitive information. (CVE-2018-5383)
It was discovered that a heap buffer overflow existed in the Marvell
Wireless LAN device driver for the Linux kernel. An attacker could use this
to cause a denial of service (system crash) or po
Ubuntu
Linux kernel (HWE) vulnerabilities
vendor_ubuntu·2019-08-01·CVSS 7.8
CVE-2019-11487 [HIGH] Linux kernel (HWE) vulnerabilities
Title: Linux kernel (HWE) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
USN-4069-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.04.
This update provides the corresponding updates for the Linux Hardware
Enablement (HWE) kernel from Ubuntu 19.04 for Ubuntu 18.04 LTS.
It was discovered that an integer overflow existed in the Linux kernel when
reference counting pages, leading to potential use-after-free issues. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2019-11487)
Jann Horn discovered that a race condition existed in the Linux kernel when
performing core dumps. A local attacker could use this to cause a denial of
service (system crash) or expose sensitive information. (
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2019-07-25·CVSS 8.1
CVE-2018-20836 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that a race condition existed in the Serial Attached SCSI
(SAS) implementation in the Linux kernel. A local attacker could possibly
use this to cause a denial of service (system crash) or execute arbitrary
code. (CVE-2018-20836)
It was discovered that the ext4 file system implementation in the Linux
kernel did not properly zero out memory in some situations. A local
attacker could use this to expose sensitive information (kernel memory).
(CVE-2019-11833)
It was discovered that the Bluetooth Human Interface Device Protocol (HIDP)
implementation in the Linux kernel did not properly verify strings were
NULL terminated in certain situations. A local attacker could use this
Ubuntu
Linux kernel (HWE) vulnerabilities
vendor_ubuntu·2019-07-23·CVSS 7.8
CVE-2019-11085 [HIGH] Linux kernel (HWE) vulnerabilities
Title: Linux kernel (HWE) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
USN-4068-1 fixed vulnerabilities in the Linux kernel for Ubuntu
18.04 LTS. This update provides the corresponding updates for the
Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 for Ubuntu
16.04 LTS.
Adam Zabrocki discovered that the Intel i915 kernel mode graphics driver in
the Linux kernel did not properly restrict mmap() ranges in some
situations. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2019-11085)
It was discovered that a race condition leading to a use-after-free existed
in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux
kernel. The RDS protocol is disabled via block
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2019-07-23·CVSS 7.8
CVE-2019-11085 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Adam Zabrocki discovered that the Intel i915 kernel mode graphics driver in
the Linux kernel did not properly restrict mmap() ranges in some
situations. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2019-11085)
It was discovered that a race condition leading to a use-after-free existed
in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux
kernel. The RDS protocol is disabled via blocklist by default in Ubuntu.
If enabled, a local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2019-11815)
It was discovered that the ext4 file system imp
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2019-07-23·CVSS 7.8
CVE-2019-11487 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that an integer overflow existed in the Linux kernel when
reference counting pages, leading to potential use-after-free issues. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2019-11487)
Jann Horn discovered that a race condition existed in the Linux kernel when
performing core dumps. A local attacker could use this to cause a denial of
service (system crash) or expose sensitive information. (CVE-2019-11599)
It was discovered that the ext4 file system implementation in the Linux
kernel did not properly zero out memory in some situations. A local
attacker could use this to expose sensitive information
Red Hat
kernel: fs/ext4/extents.c leads to information disclosure
vendor_redhat·2019-05-11·CVSS 5.5
CVE-2019-11833 [MEDIUM] CWE-456 kernel: fs/ext4/extents.c leads to information disclosure
kernel: fs/ext4/extents.c leads to information disclosure
fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
A flaw was found in the Linux kernel's implementation of ext4 extent management. The kernel doesn't correctly initialize memory regions in the extent tree block which may be exported to a local user to obtain sensitive information by reading empty/uninitialized data from the filesystem.
Statement: This is a possible information leak of data that existed in the extent tree blocks. While the attacker does not have control of what exists in the blocks prior to this point they may be able to glean confiden
Debian
CVE-2019-11833: linux - fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused...
vendor_debian·2019·CVSS 5.5
CVE-2019-11833 [MEDIUM] CVE-2019-11833: linux - fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused...
fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
Scope: local
bookworm: resolved (fixed in 4.19.37-4)
bullseye: resolved (fixed in 4.19.37-4)
forky: resolved (fixed in 4.19.37-4)
sid: resolved (fixed in 4.19.37-4)
trixie: resolved (fixed in 4.19.37-4)
GHSA
GHSA-9ph4-cmpw-4gmf: fs/ext4/extents
ghsa_unreviewed·2022-05-24
CVE-2019-11833 [MEDIUM] CWE-908 GHSA-9ph4-cmpw-4gmf: fs/ext4/extents
fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
OSV
linux-aws vulnerabilities
osv·2019-09-02·CVSS 3.3
CVE-2018-13053 [LOW] linux-aws vulnerabilities
linux-aws vulnerabilities
It was discovered that the alarmtimer implementation in the Linux kernel
contained an integer overflow vulnerability. A local attacker could use
this to cause a denial of service. (CVE-2018-13053)
Wen Xu discovered that the XFS filesystem implementation in the Linux
kernel did not properly track inode validations. An attacker could use this
to construct a malicious XFS image that, when mounted, could cause a denial
of service (system crash). (CVE-2018-13093)
Wen Xu discovered that the f2fs file system implementation in the Linux
kernel did not properly validate metadata. An attacker could use this to
construct a malicious f2fs image that, when mounted, could cause a denial
of service (system crash). (CVE-2018-13096, CVE-2018-13097, CVE-2018-13098,
CVE-2018-1309
OSV
linux-lts-xenial, linux-aws vulnerabilities
osv·2019-08-13·CVSS 6.8
[MEDIUM] linux-lts-xenial, linux-aws vulnerabilities
linux-lts-xenial, linux-aws vulnerabilities
USN-4095-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu
14.04 ESM.
Eli Biham and Lior Neumann discovered that the Bluetooth implementation in
the Linux kernel did not properly validate elliptic curve parameters during
Diffie-Hellman key exchange in some situations. An attacker could use this
to expose sensitive information. (CVE-2018-5383)
It was discovered that a heap buffer overflow existed in the Marvell
Wireless LAN device driver for the Linux kernel. An attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2019-10126)
Andrei Vlad Lutas and
OSV
linux-hwe vulnerabilities
osv·2019-08-01·CVSS 7.8
[HIGH] linux-hwe vulnerabilities
linux-hwe vulnerabilities
USN-4069-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.04.
This update provides the corresponding updates for the Linux Hardware
Enablement (HWE) kernel from Ubuntu 19.04 for Ubuntu 18.04 LTS.
It was discovered that an integer overflow existed in the Linux kernel when
reference counting pages, leading to potential use-after-free issues. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2019-11487)
Jann Horn discovered that a race condition existed in the Linux kernel when
performing core dumps. A local attacker could use this to cause a denial of
service (system crash) or expose sensitive information. (CVE-2019-11599)
It was discovered that the ext4 file system implementation in the
OSV
linux, linux-aws, linux-kvm, linux-raspi2 vulnerabilities
osv·2019-07-25·CVSS 8.1
CVE-2018-20836 [HIGH] linux, linux-aws, linux-kvm, linux-raspi2 vulnerabilities
linux, linux-aws, linux-kvm, linux-raspi2 vulnerabilities
It was discovered that a race condition existed in the Serial Attached SCSI
(SAS) implementation in the Linux kernel. A local attacker could possibly
use this to cause a denial of service (system crash) or execute arbitrary
code. (CVE-2018-20836)
It was discovered that the ext4 file system implementation in the Linux
kernel did not properly zero out memory in some situations. A local
attacker could use this to expose sensitive information (kernel memory).
(CVE-2019-11833)
It was discovered that the Bluetooth Human Interface Device Protocol (HIDP)
implementation in the Linux kernel did not properly verify strings were
NULL terminated in certain situations. A local attacker could use this to
expose sensitive information (kernel mem
OSV
linux, linux-aws, linux-gcp, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
osv·2019-07-23·CVSS 7.8
CVE-2019-11085 [HIGH] linux, linux-aws, linux-gcp, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
linux, linux-aws, linux-gcp, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
Adam Zabrocki discovered that the Intel i915 kernel mode graphics driver in
the Linux kernel did not properly restrict mmap() ranges in some
situations. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2019-11085)
It was discovered that a race condition leading to a use-after-free existed
in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux
kernel. The RDS protocol is disabled via blocklist by default in Ubuntu.
If enabled, a local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2019-11815)
It was discovered that the ext4 file system impl
OSV
linux-hwe, linux-gcp vulnerabilities
osv·2019-07-23·CVSS 7.8
[HIGH] linux-hwe, linux-gcp vulnerabilities
linux-hwe, linux-gcp vulnerabilities
USN-4068-1 fixed vulnerabilities in the Linux kernel for Ubuntu
18.04 LTS. This update provides the corresponding updates for the
Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 for Ubuntu
16.04 LTS.
Adam Zabrocki discovered that the Intel i915 kernel mode graphics driver in
the Linux kernel did not properly restrict mmap() ranges in some
situations. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2019-11085)
It was discovered that a race condition leading to a use-after-free existed
in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux
kernel. The RDS protocol is disabled via blocklist by default in Ubuntu.
If enabled, a local attacker could use this
OSV
CVE-2019-11833: fs/ext4/extents
osv·2019-05-15·CVSS 5.5
CVE-2019-11833 [MEDIUM] CVE-2019-11833: fs/ext4/extents
fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
Kernel
ext4: zero out the unused memory region in the extent tree block
kernel_security·2019-05-10·CVSS 5.5
CVE-2019-11833 [MEDIUM] ext4: zero out the unused memory region in the extent tree block
ext4: zero out the unused memory region in the extent tree block
This commit zeroes out the unused memory region in the buffer_head
corresponding to the extent metablock after writing the extent header
and the corresponding extent node entries.
This is done to prevent random uninitialized data from getting into
the filesystem when the extent block is synced.
This fixes CVE-2019-11833.
Signed-off-by: Sriram Rajagopalan
Signed-off-by: Theodore Ts'o
Cc: [email protected]
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure [fedora-all]
bugzilla·2019-05-20·CVSS 5.5
CVE-2019-11833 [MEDIUM] CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure [fedora-all]
CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported
Bugzilla
CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure
bugzilla·2019-05-20·CVSS 5.5
CVE-2019-11833 [MEDIUM] CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure
CVE-2019-11833 kernel: fs/ext4/extents.c leads to information disclosure
A flaw was found in the Linux kernels implementation of ext4 extent management which did not correctly initialize memory regions in the extent tree block which may be exported to a local user to obtain sensitive information by reading empty/uninitialized data from the filesystem.
This is considered an information leak, but the information leveraged could be used in to future another attack.
Upstream patch:
https://github.com/torvalds/linux/commit/592acbf16821288ecdc4192c47e3774a4c48bb64
Discussion:
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1712073]
---
Statement:
This is a possible information leak of data that existed in the extent tree blocks. While the attacker does not have c
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.htmlhttp://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlhttp://www.securityfocus.com/bid/108372https://access.redhat.com/errata/RHSA-2019:2029https://access.redhat.com/errata/RHSA-2019:2043https://access.redhat.com/errata/RHSA-2019:3309https://access.redhat.com/errata/RHSA-2019:3517https://github.com/torvalds/linux/commit/592acbf16821288ecdc4192c47e3774a4c48bb64https://lists.debian.org/debian-lts-announce/2019/06/msg00010.htmlhttps://lists.debian.org/debian-lts-announce/2019/06/msg00011.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GJGZIMGB72TL7OGWRMHIL43WHXFQWU4X/https://seclists.org/bugtraq/2019/Jun/26https://usn.ubuntu.com/4068-1/https://usn.ubuntu.com/4068-2/https://usn.ubuntu.com/4069-1/https://usn.ubuntu.com/4069-2/https://usn.ubuntu.com/4076-1/https://usn.ubuntu.com/4095-2/https://usn.ubuntu.com/4118-1/https://www.debian.org/security/2019/dsa-4465http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.htmlhttp://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlhttp://www.securityfocus.com/bid/108372https://access.redhat.com/errata/RHSA-2019:2029https://access.redhat.com/errata/RHSA-2019:2043https://access.redhat.com/errata/RHSA-2019:3309https://access.redhat.com/errata/RHSA-2019:3517https://github.com/torvalds/linux/commit/592acbf16821288ecdc4192c47e3774a4c48bb64https://lists.debian.org/debian-lts-announce/2019/06/msg00010.htmlhttps://lists.debian.org/debian-lts-announce/2019/06/msg00011.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GJGZIMGB72TL7OGWRMHIL43WHXFQWU4X/https://seclists.org/bugtraq/2019/Jun/26https://usn.ubuntu.com/4068-1/https://usn.ubuntu.com/4068-2/https://usn.ubuntu.com/4069-1/https://usn.ubuntu.com/4069-2/https://usn.ubuntu.com/4076-1/https://usn.ubuntu.com/4095-2/https://usn.ubuntu.com/4118-1/https://www.debian.org/security/2019/dsa-4465
2019-05-15
Published