VULNERABILITY INTELLIGENCE

CVE-2018-16862

CVSS score5.3 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2018-11-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N

Description

A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references