Home > Vulnerability Database > CVE-2010-2226

Mend.io Vulnerability Database

CVE-2010-2226

Good to know:

Date: September 3, 2010

The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.

Language: C

Severity Score

7.5

Related Resources (22)

Url: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html

Url: http://marc.info/?l=oss-security&m=127677135609357&w=2

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

Url: http://archives.free.net.ph/message/20100616.130710.301704aa.en.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0610.html

Url: http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Url: http://www.securityfocus.com/bid/40920

Url: http://www.ubuntu.com/usn/USN-1000-1

Url: http://www.securityfocus.com/archive/1/516397/100/0/threaded

Url: http://marc.info/?l=oss-security&m=127687486331790&w=2

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-2226

Url: http://www.debian.org/security/2010/dsa-2094

Url: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35

Url: http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Url: https://access.redhat.com/security/cve/CVE-2010-2226

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-2226

Url: http://secunia.com/advisories/43315

Url: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63

Url: https://bugzilla.redhat.com/show_bug.cgi?id=605158

Url: http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html

Url: http://www.vupen.com/english/advisories/2011/0298

Url: https://www.mend.io/vulnerability-database/CVE-2010-2226

Severity Score

7.5

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Input Validation

CWE-20

Top Fix

Upgrade Version

Upgrade to version 2.6.35

Learn More

CVSS v3

Base Score:	7.5
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL

CVSS v2

Base Score:	7.3
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-2226

Good to know:

Date: September 3, 2010

Language: C

Severity Score

Related Resources (22)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3

CVSS v2

Do you need more information?