fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-before-commit list, which allows local users to obtain sensitive information from other users' files in opportunistic circumstances by waiting for a hardware reset, creating a new file, making write system calls, and reading this file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7495.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@06bd3c36a733ac27962fea7d6f47168841376824",
"digest": {
"line_hashes": [
"45611457859961586942899117105846905315",
"229141839560149551310275506914228743824",
"246204360170496305288550260026166648820",
"211139530741874837089047436818059537602",
"275931028129645563781615705641046952396",
"50822141777753905584904284487648214457",
"191054071981819524218074269714899280878",
"23578392820869046881148818893776163047",
"43021300390552853510858995277305921417",
"277881861582962699270481004849051034484",
"257255888398158025108348303672626135799",
"339603627385147673378264469966124922745",
"35096538958512324816648109127099298745",
"220296990169368931534141239399319491864",
"277707285866540241678404036541406932148"
],
"threshold": 0.9
},
"id": "CVE-2017-7495-3c484288",
"deprecated": false,
"target": {
"file": "fs/ext4/inode.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@06bd3c36a733ac27962fea7d6f47168841376824",
"digest": {
"function_hash": "245186897109559393227152152141049915736",
"length": 4306.0
},
"id": "CVE-2017-7495-5c9969c5",
"deprecated": false,
"target": {
"file": "fs/ext4/inode.c",
"function": "ext4_map_blocks"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@06bd3c36a733ac27962fea7d6f47168841376824",
"digest": {
"function_hash": "131879140641948271019775481062111110189",
"length": 1132.0
},
"id": "CVE-2017-7495-c2200daa",
"deprecated": false,
"target": {
"file": "fs/ext4/inode.c",
"function": "ext4_write_end"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7495.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/06bd3c36a733ac27962fea7d6f47168841376824",
"digest": {
"line_hashes": [
"45611457859961586942899117105846905315",
"229141839560149551310275506914228743824",
"246204360170496305288550260026166648820",
"211139530741874837089047436818059537602",
"275931028129645563781615705641046952396",
"50822141777753905584904284487648214457",
"191054071981819524218074269714899280878",
"23578392820869046881148818893776163047",
"43021300390552853510858995277305921417",
"277881861582962699270481004849051034484",
"257255888398158025108348303672626135799",
"339603627385147673378264469966124922745",
"35096538958512324816648109127099298745",
"220296990169368931534141239399319491864",
"277707285866540241678404036541406932148"
],
"threshold": 0.9
},
"id": "CVE-2017-7495-18f05184",
"deprecated": false,
"target": {
"file": "fs/ext4/inode.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/06bd3c36a733ac27962fea7d6f47168841376824",
"digest": {
"function_hash": "131879140641948271019775481062111110189",
"length": 1132.0
},
"id": "CVE-2017-7495-5e870768",
"deprecated": false,
"target": {
"file": "fs/ext4/inode.c",
"function": "ext4_write_end"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/06bd3c36a733ac27962fea7d6f47168841376824",
"digest": {
"function_hash": "245186897109559393227152152141049915736",
"length": 4306.0
},
"id": "CVE-2017-7495-a15bfafc",
"deprecated": false,
"target": {
"file": "fs/ext4/inode.c",
"function": "ext4_map_blocks"
}
}
]