CVE-2006-4813

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-12 · updated 2026-06-16

Description

The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.

Affected products

Linux kernel: 2.6.0, 2.6.0-test1, 2.6.0-test10, 2.6.0-test11, 2.6.0-test2, 2.6.0-test3 (+84)

References

http://osvdb.org/31376
http://rhn.redhat.com/errata/RHSA-2007-0014.html
http://secunia.com/advisories/23370
http://secunia.com/advisories/23384
http://secunia.com/advisories/23474
http://secunia.com/advisories/23752
http://secunia.com/advisories/23997
http://secunia.com/advisories/24206
http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=152becd26e0563aefdbc4fd1fe491928efe92d1f
http://www.mandriva.com/security/advisories?name=MDKSA-2007:012
http://www.mandriva.com/security/advisories?name=MDKSA-2007:025

Get alerted when CVE-2006-4813 or the next vulnerability affects your stack