CVE-2011-0463

The ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain potentially sensitive information from uninitialized disk locations by reading a file.

• CWE-20

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=272b62c1f0f6f742046e45b50b6fec98860208a0
• http://oss.oracle.com/pipermail/ocfs2-devel/2011-February/007846.htmlExploit, Patch, Third Party Advisory
• http://secunia.com/advisories/43966Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc1Release Notes, Vendor Advisory
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• https://bugzilla.novell.com/show_bug.cgi?id=673037Exploit, Issue Tracking, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=272b62c1f0f6f742046e45b50b6fec98860208a0
• http://oss.oracle.com/pipermail/ocfs2-devel/2011-February/007846.htmlExploit, Patch, Third Party Advisory
• http://secunia.com/advisories/43966Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc1Release Notes, Vendor Advisory
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• https://bugzilla.novell.com/show_bug.cgi?id=673037Exploit, Issue Tracking, Third Party Advisory

Published

Apr 10, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0457Cross-site scripting (XSS) vulnerability in e107 0.7.22 and …
• CVE-2011-0458Untrusted search path vulnerability in the Locate on Disk fe…
• CVE-2011-0459Cross-site scripting (XSS) vulnerability in Cyber-Ark Passwo…
• CVE-2011-0460The init script in kbd, possibly 1.14.1 and earlier, allows …
• CVE-2011-0461/etc/init.d/boot.localfs in the aaa_base package before 11.2…
• CVE-2011-0462Multiple cross-site scripting (XSS) vulnerabilities in the l…
• CVE-2011-0464Unspecified vulnerability in Novell Vibe OnPrem 3.0 before H…
• CVE-2011-0465xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier all…
• CVE-2011-0466The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.…
• CVE-2011-0467A vulnerability in the listing of available software of SUSE…8.8
• CVE-2011-0468The aaa_base package before 11.3-8.9.1 in SUSE openSUSE 11.3…
• CVE-2011-0469Code injection in openSUSE when running some source services…