CVE-2005-0400: The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory w...

Security readout for executives and security teams

CVE-2005-0400 is a Linux kernel ext2 information leak. On affected systems, a local user may read data left in memory when a new directory block is created. This is not described as remote code execution, but it can expose sensitive information on old or unsupported Linux systems. Exposure is most likely on legacy Linux systems running kernels before 2.6.11.6 with ext2 filesystems and local untrusted users. Distribution kernels may have backported fixes, so package advisory status matters more than upstream version alone. Treat this as legacy-system hygiene with confidentiality risk. It is not presented as internet-exposed, but old multi-user Linux systems should be patched or retired because local data leakage can undermine trust boundaries. Mitigation focus: Update affected Linux kernels using vendor-supported packages.; Confirm the kernel includes the ext2_make_empty initialization fix.; Review Red Hat, Ubuntu, or relevant distribution advisories..

Prepared

Jun 29, 2026, 22:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.