CVEvulnerability
CVE-2010-2226
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-09-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
Affected configurations
• linux linux kernel (< 2.6.35)
• suse linux enterprise desktop 10
• suse linux enterprise server 10
• suse linux enterprise software development kit 10
• debian debian linux 5.0
• canonical ubuntu linux 6.06
• canonical ubuntu linux 8.04
• canonical ubuntu linux 9.04
• canonical ubuntu linux 9.10
• canonical ubuntu linux 10.04
• canonical ubuntu linux 10.10
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://archives.free.net.ph/message/20100616.130710.301704aa.en.html Broken Link
- http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html Broken Link
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List, Third Party Advisory
- http://marc.info/?l=oss-security&m=127677135609357&w=2 Third Party Advisory
- http://marc.info/?l=oss-security&m=127687486331790&w=2 Third Party Advisory
- http://secunia.com/advisories/43315 Third Party Advisory
- http://www.debian.org/security/2010/dsa-2094 Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0610.html Third Party Advisory
- http://www.securityfocus.com/archive/1/516397/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/40920 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0298 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=605158 Issue Tracking, Third Party Advisory
- http://archives.free.net.ph/message/20100616.130710.301704aa.en.html Broken Link
- http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html Broken Link
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List, Third Party Advisory
- http://marc.info/?l=oss-security&m=127677135609357&w=2 Third Party Advisory
- http://marc.info/?l=oss-security&m=127687486331790&w=2 Third Party Advisory
- http://secunia.com/advisories/43315 Third Party Advisory
- http://www.debian.org/security/2010/dsa-2094 Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0610.html Third Party Advisory
- http://www.securityfocus.com/archive/1/516397/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/40920 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0298 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=605158 Issue Tracking, Third Party Advisory