Name: CVE-2010-2538: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2010-09-30T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2010-2538, CWE-200, CVSS 5.5, EPSS 0.0038

Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive information via a BTRFS_IOC_CLONE_RANGE ioctl call.

CVSS Details

CVSS 3.1 Base Score: 5.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Suse	—	Upgrade preload-kmp-defaultUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-ec2-develUpgrade preload-kmp-desktopUpgrade kernel-vmi-develUpgrade kernel-desktop-develUpgrade kernel-defaultUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade kernel-pae-develUpgrade kernel-desktop-baseUpgrade kernel-source-vanillaUpgrade kernel-pae-baseUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-vanilla-baseUpgrade kernel-desktopUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade kernel-vanillaUpgrade kernel-debug-devel	Feb 17, 2015	Sep 30, 2010
Ubuntu	—	Upgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.35-24-virtual	Nov 8, 2024	Sep 30, 2010

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence