Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel ext2实现信息泄漏漏洞
Vulnerability Description
Linux Kernel是开发源码操作系统Linux的内核。 Linux在实现ext2文件系统时所使用的ext2_make_empty()函数存在信息泄漏漏洞。在创建目录时，系统从kernel内存获取新的内存块存储初始的目录条目('.'和'..')。因为会未经初始化就使用这个内存块写入磁盘，因此可能导致泄漏内存块空间中的信息。 每次创建目录时最多可泄漏4072(4096－2*12)字节的Kernel内存。在向目录内存块中添加了额外的条目时，这个数量会降低。注意：由于ext2实现使用dir-in-pagec
CVSS Information
N/A
Vulnerability Type
N/A