Description
The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | kernel-source-2.6.8 | 2.6.8-16sarge6 | DSA-1233-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +8 | 2.6.9-42.0.8.EL | RHSA-2007:0014 |
Advisories 2
- RHSA-2007:0014 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-1233-1 kernel-source-2.6.8 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207463
- MDKSA-2007:025 vendor-advisory
- SUSE-SA:2006:079 vendor-advisory
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=152becd26e0563aefdbc4fd1fe491928efe92d1f
- oval:org.mitre.oval:def:11701 vdb-entry signature
- RHSA-2007:0014 vendor-advisory
- MDKSA-2007:012 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm
- 21522 vdb-entry
- 23384 third-party-advisory
- 23752 third-party-advisory
- 24206 third-party-advisory
- 23474 third-party-advisory
- DSA-1233 vendor-advisory
- 23370 third-party-advisory
- 23997 third-party-advisory
- USN-395-1 vendor-advisory
- 31376 vdb-entry