CVE-2010-2226
Publication date 3 September 2010
Last updated 24 July 2024
Ubuntu priority
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
From the Ubuntu Security Team
Dan Rosenberg discovered that the swapexit xfs ioctl did not correctly check file permissions. A local attacker could exploit this to read from write-only files, leading to a loss of privacy.
Status
Package | Ubuntu Release | Status |
---|---|---|
linux | 10.10 maverick |
Not affected
|
10.04 LTS lucid |
Not affected
|
|
9.10 karmic |
Fixed 2.6.31-22.67
|
|
9.04 jaunty |
Fixed 2.6.28-19.66
|
|
8.04 LTS hardy |
Fixed 2.6.24-28.80
|
|
6.06 LTS dapper | Not in release | |
linux-ec2 | 10.10 maverick | Ignored end of life |
10.04 LTS lucid |
Fixed 2.6.32-309.18
|
|
9.10 karmic |
Fixed 2.6.31-307.21
|
|
8.04 LTS hardy | Not in release | |
6.06 LTS dapper | Not in release | |
linux-fsl-imx51 | 10.10 maverick | Not in release |
10.04 LTS lucid |
Fixed 2.6.31-608.22
|
|
9.10 karmic |
Fixed 2.6.31-112.30
|
|
8.04 LTS hardy | Not in release | |
6.06 LTS dapper | Not in release | |
linux-lts-backport-maverick | 10.10 maverick | Not in release |
10.04 LTS lucid |
Fixed 2.6.35-25.44~lucid1
|
|
9.10 karmic | Not in release | |
8.04 LTS hardy | Not in release | |
6.06 LTS dapper | Not in release | |
linux-source-2.6.15 | 10.10 maverick | Not in release |
10.04 LTS lucid | Not in release | |
9.10 karmic | Not in release | |
9.04 jaunty | Not in release | |
8.04 LTS hardy | Not in release | |
6.06 LTS dapper |
Not affected
|
Patch details
References
Related Ubuntu Security Notices (USN)
- USN-1074-1
- Linux kernel vulnerabilities
- 25 February 2011
- USN-1083-1
- Linux kernel vulnerabilities
- 3 March 2011
- USN-1000-1
- Linux kernel vulnerabilities
- 19 October 2010
- USN-1074-2
- Linux kernel vulnerabilities
- 28 February 2011