CVE-2018-16862 Information disclosure in kernel:
Attackers can read leftover data from deleted files when new files reuse the same inode due to a cleancache subsystem flaw in the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-16862?
CVE-2018-16862 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 26 Nov 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.
Weakness: CWE-200
Which versions are affected by CVE-2018-16862?
It affects 4 products.
Products include Canonical Ubuntu Linux, Debian Debian Linux, Linux kernel, Redhat Enterprise Linux.
How do I fix CVE-2018-16862?
Apply the vendor's patch.
Is CVE-2018-16862 being exploited?
There is no known exploitation of CVE-2018-16862 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2018-16862, GHSA-8mfm-2wff-rgp2, UBUNTU-CVE-2018-16862.