Name: CVE-2010-2226: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2010-09-03T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2010-2226, CWE-200, CVSS 5.5, EPSS 0.00108

The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.

CVSS Details

CVSS 3.1 Base Score: 5.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-xenUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel	Dec 1, 2016	Sep 3, 2010
Oracle_linux	—	Upgrade kernel	Oct 16, 2024	Sep 3, 2010
Suse	—	Upgrade kernel-trace-baseUpgrade kernel-pmac64Upgrade kernel-rt_traceUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-vmiUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade um-host-kernelUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-64k-pagesizeUpgrade iscsitarget-kmp-rtUpgrade preload-kmp-desktopUpgrade kernel-paeUpgrade ofed-kmp-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-vanilla-baseUpgrade kernel-xen-develUpgrade kernel-rt-baseUpgrade kernel-debug-baseUpgrade kernel-smpUpgrade kernel-vanilla-develUpgrade preload-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_trace-baseUpgrade kernel-rtUpgrade kernel-xenUpgrade kernel-iseries64Upgrade kernel-umUpgrade kernel-symsUpgrade kernel-bigsmpUpgrade brocade-bna-kmp-rtUpgrade kernel-xenpaeUpgrade kernel-desktopUpgrade kernel-defaultUpgrade xen-kmpUpgrade kernel-sn2Upgrade kernel-pae-baseUpgrade kernel-rt_trace-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-default-baseUpgrade kernel-desktop-develUpgrade kernel-pseries64Upgrade kernel-kdumpUpgrade kernel-desktop-base	Feb 17, 2015	Sep 3, 2010
Ubuntu	—	Upgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.24-28-rt	Nov 8, 2024	Sep 3, 2010
Vmsa 2011 0003	—	Upgrade VMware ESX 4.1 to build number 348481Upgrade VMware ESX 4.0 to build number 360236	Feb 16, 2011	Sep 3, 2010

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence