High severity · published Sep 30, 2010
CVE-2010-2943
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read…
8.1
CVSS
17%
EPSS
No
On KEV
Description
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)17.0% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 2.6.35 · source: NVD
AC
Aura Communication Manager · Avaya
5.2 · source: NVD
AP
Aura Presence Services · Avaya
6.0; 6.1; 6.1.1 · source: NVD
AS
Aura Session Manager · Avaya
1.1; 5.2; 6.0 · source: NVD
AS
Aura System Manager · Avaya
5.2; 6.0; 6.1; 6.1.1 · source: NVD
AS
Aura System Platform · Avaya
1.1; 6.0; 6.0 · source: NVD
AV
Aura Voice Portal · Avaya
5.0; 5.1; 5.1 · source: NVD
ES
Esx · Vmware
4.0; 4.1 · source: NVD
IQ
IQ · Avaya
5.0; 5.1 · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 9.10; 10.04; 10.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2943
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2943
Broken Link
http://article.gmane.org/gmane.comp.file-systems.xfs.general/33767
Broken Link
http://article.gmane.org/gmane.comp.file-systems.xfs.general/33768
Broken Link
http://article.gmane.org/gmane.comp.file-systems.xfs.general/33769
Broken Link
http://article.gmane.org/gmane.comp.file-systems.xfs.general/33771
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1920779e67cbf5ea8afef317777c5bf2b8096188
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7124fe0a5b619d65b739477b3b55a20bf805b06d
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability