CVE-2018-16862: medium-severity vulnerability in [UNKNOWN] kernel:
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.5%
A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
Affected products
[UNKNOWN] · kernel:Related CVEs — [UNKNOWN] kernel:
In the same product, most dangerous first.
References
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16862https://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlhttps://lists.debian.org/debian-lts-announce/2019/03/msg00034.htmlhttps://lists.debian.org/debian-lts-announce/2019/04/msg00004.htmlhttps://lore.kernel.org/patchwork/patch/1011367/https://seclists.org/oss-sec/2018/q4/169https://usn.ubuntu.com/3879-1/https://usn.ubuntu.com/3879-2/https://usn.ubuntu.com/4094-1/https://usn.ubuntu.com/4118-1/http://www.securityfocus.com/bid/106009