Description
The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +6 | 2.6.9-5.0.5.EL | RHSA-2005:366 |
| RHEL 3 | kernel +8 | 2.4.21-37.EL | RHSA-2005:663 |
Advisories 2
- RHSA-2005:663 Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 6 Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:366 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- http://arkoon.net/advisories/ext2-make-empty-leak.txt
- 18684 third-party-advisory
- RHSA-2005:366 vendor-advisory
- 14713 third-party-advisory
- USN-103-1 vendor-advisory
- RHSA-2006:0190 vendor-advisory
- 20050401 Information leak in the Linux kernel ext2 implementation mailing-list
- 17002 third-party-advisory
- FLSA:152532 vendor-advisory
- oval:org.mitre.oval:def:10336 vdb-entry signature
- kernel-ext2-information-disclosure(19866) vdb-entry
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6
- RHSA-2005:663 vendor-advisory
- ADV-2005-1878 vdb-entry
- 12932 vdb-entry
- RHSA-2006:0191 vendor-advisory