CVEvulnerability
CVE-2010-2525
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-06-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-863
Description
A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker could exploit this flaw to gain access or execute any file stored in the gfs2 file system.
Affected configurations
• linux linux kernel 2.6.33
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2646a1f61a3b5525914757f10fa12b5b94713648 Mailing List, Patch, Vendor Advisory
- https://ubuntu.com/security/CVE-2010-2525 Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2646a1f61a3b5525914757f10fa12b5b94713648 Mailing List, Patch, Vendor Advisory
- https://ubuntu.com/security/CVE-2010-2525 Third Party Advisory