VulnerabilityModified
CVE-2010-2226
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into…
LOW 2.1EPSS 0.43%
Does this matter?
Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.
Description
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.43% probability · 37th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- linux/linux kernel · suse/linux enterprise desktop · suse/linux enterprise server · suse/linux enterprise software development kit · debian/debian linux · canonical/ubuntu linux
- Source
- secalert@redhat.com
References
- http://archives.free.net.ph/message/20100616.130710.301704aa.en.htmlBroken Link
- http://archives.free.net.ph/message/20100616.135735.40f53a32.en.htmlBroken Link
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List, Third Party Advisory
- http://marc.info/?l=oss-security&m=127677135609357&w=2Third Party Advisory
- http://marc.info/?l=oss-security&m=127687486331790&w=2Third Party Advisory
- http://secunia.com/advisories/43315Third Party Advisory
- http://www.debian.org/security/2010/dsa-2094Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:198Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0610.htmlThird Party Advisory
- http://www.securityfocus.com/archive/1/516397/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/40920Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1000-1Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0003.htmlThird Party Advisory
- http://www.vupen.com/english/advisories/2011/0298Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=605158Issue Tracking, Third Party Advisory
- http://archives.free.net.ph/message/20100616.130710.301704aa.en.htmlBroken Link
- http://archives.free.net.ph/message/20100616.135735.40f53a32.en.htmlBroken Link
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List, Third Party Advisory
- http://marc.info/?l=oss-security&m=127677135609357&w=2Third Party Advisory
- http://marc.info/?l=oss-security&m=127687486331790&w=2Third Party Advisory
- http://secunia.com/advisories/43315Third Party Advisory
- http://www.debian.org/security/2010/dsa-2094Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:198Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0610.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.