CVE-2018-16862

A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.

• CWE-200
• CWE-200

• http://www.securityfocus.com/bid/106009Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16862Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/03/msg00034.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
• https://lore.kernel.org/patchwork/patch/1011367/Issue Tracking, Patch, Vendor Advisory
• https://seclists.org/oss-sec/2018/q4/169Mailing List, Third Party Advisory
• https://usn.ubuntu.com/3879-1/Third Party Advisory
• https://usn.ubuntu.com/3879-2/Third Party Advisory
• https://usn.ubuntu.com/4094-1/
• https://usn.ubuntu.com/4118-1/
• http://www.securityfocus.com/bid/106009Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16862Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/03/msg00034.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
• https://lore.kernel.org/patchwork/patch/1011367/Issue Tracking, Patch, Vendor Advisory
• https://seclists.org/oss-sec/2018/q4/169Mailing List, Third Party Advisory
• https://usn.ubuntu.com/3879-1/Third Party Advisory
• https://usn.ubuntu.com/3879-2/Third Party Advisory
• https://usn.ubuntu.com/4094-1/
• https://usn.ubuntu.com/4118-1/

Published

Nov 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16857Samba from version 4.9.0 and before version 4.9.3 that have …7.4
• CVE-2018-16858It was found that libreoffice before versions 6.0.7 and 6.1.…7.8
• CVE-2018-16859Execution of Ansible playbooks on Windows platforms with Pow…4.2
• CVE-2018-1686IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable …5.4
• CVE-2018-16860A flaw was found in samba's Heimdal KDC implementation, vers…7.5
• CVE-2018-16861A cross-site scripting (XSS) flaw was found in the foreman c…7.6
• CVE-2018-16863It was found that RHSA-2018:2918 did not fully fix CVE-2018-…7.3
• CVE-2018-16864An allocation of memory without limits, that could result in…7.8
• CVE-2018-16865An allocation of memory without limits, that could result in…7.8
• CVE-2018-16866An out of bounds read was discovered in systemd-journald in …3.3
• CVE-2018-16867A flaw was found in qemu Media Transfer Protocol (MTP) befor…7.8
• CVE-2018-16868A Bleichenbacher type side-channel based padding oracle atta…5.6