The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-xen-develUpgrade kernel-headers | Dec 1, 2016 | Sep 3, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 3, 2010 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-debug-develUpgrade kernel-trace-baseUpgrade kernel-rt_trace-develUpgrade brocade-bna-kmp-rtUpgrade kernel-kdumpUpgrade kernel-desktopUpgrade um-host-install-initrdUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-vanillaUpgrade xen-kmpUpgrade kernel-kdumppaeUpgrade kernel-desktop-baseUpgrade kernel-bigsmpUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-pseries64Upgrade kernel-sn2Upgrade kernel-pae-baseUpgrade kernel-umUpgrade kernel-debugUpgrade kernel-vmipaeUpgrade kernel-xenpaeUpgrade kernel-syms-rtUpgrade kernel-desktop-develUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-rt-baseUpgrade kernel-64k-pagesizeUpgrade iscsitarget-kmp-rtUpgrade kernel-rt_traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-traceUpgrade preload-kmp-defaultUpgrade kernel-default-develUpgrade kernel-vanilla-baseUpgrade um-host-kernelUpgrade ofed-kmp-rtUpgrade kernel-rt_trace-baseUpgrade preload-kmp-desktopUpgrade kernel-xenUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-ppc64Upgrade kernel-vanilla-develUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-source-vanillaUpgrade kernel-smpUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-rtUpgrade kernel-vmi | Feb 17, 2015 | Sep 3, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.32-25-preempt | Nov 8, 2024 | Sep 3, 2010 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.0 to build number 360236Upgrade VMware ESX 4.1 to build number 348481 | Feb 16, 2011 | Sep 3, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub