|Description||Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.|
|Source||CVE (at NVD; LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)|
|NVD severity||low (attack range: local)|
The information below is based on the following data on fixed versions.
- linux-2.6 <not-affected> (Fixed before upload into archive; in 2.5.27)
- kernel-source-2.4.27 <not-affected> (Fixed before upload into archive; in 2.4.21)