Unscored severity · published Sep 3, 2010
CVE-2010-2226
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 2.6.35 · source: NVD
DL
Debian Linux · Debian
5.0 · source: NVD
LE
Linux Enterprise Desktop · Suse
10 · source: NVD
LE
Linux Enterprise Server · Suse
10 · source: NVD
LE
Linux Enterprise Software Development Kit · Suse
10 · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 8.04; 9.04; 9.10; 10.04; 10.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2226
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2226
Broken Link
http://archives.free.net.ph/message/20100616.130710.301704aa.en.html
Broken Link
http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
Third Party Advisory
http://marc.info/?l=oss-security&m=127677135609357&w=2
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability