PT-2010-3303 · Linux+1 · Linux Kernel+1

Dan Rosenberg · Published 2010-06-01 · Updated 2024-06-15 · CVE-2010-1641

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34-git10

Description The issue concerns the do gfs2 set flags function in fs/gfs2/file.c, which fails to verify file ownership. This allows local users to bypass intended access restrictions by sending a SETFLAGS ioctl request.

Recommendations For versions prior to 2.6.34-git10, update to version 2.6.34-git10 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-1641

OPENSUSE-SU-2024:10128-1

RHSA-2010:0504

RHSA-2010_0504

Affected Products

Linux Kernel

Red Hat

References · 238

• https://bdu.fstec.ru/vul/2015-01047 · Security Note
• https://bdu.fstec.ru/vul/2015-01063 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01077 · Security Note
• https://bdu.fstec.ru/vul/2015-01033 · Security Note
• https://bdu.fstec.ru/vul/2015-01128 · Security Note
• https://bdu.fstec.ru/vul/2015-01073 · Security Note
• https://bdu.fstec.ru/vul/2015-01130 · Security Note
• https://bdu.fstec.ru/vul/2015-01131 · Security Note
• https://bdu.fstec.ru/vul/2015-01080 · Security Note
• https://bdu.fstec.ru/vul/2015-01109 · Security Note
• https://bdu.fstec.ru/vul/2015-01056 · Security Note
• https://bdu.fstec.ru/vul/2015-01085 · Security Note
• https://bdu.fstec.ru/vul/2015-01039 · Security Note
• https://bdu.fstec.ru/vul/2015-01032 · Security Note