PT-2010-3679 · Linux+1 · Linux Kernel+1

Dan Rosenberg · Published 2010-08-10 · Updated 2024-06-15 · CVE-2010-2066

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.35

Description The issue allows local users to overwrite an append-only file. This is achieved through a MOVE EXT ioctl call that specifies the append-only file as a donor, exploiting the mext check arguments function in fs/ext4/move extent.c.

Recommendations For versions prior to 2.6.35, update to version 2.6.35 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-2066

OPENSUSE-SU-2024:10128-1

RHSA-2010:0610

RHSA-2010_0610

Affected Products

Linux Kernel

Red Hat

References · 222

• https://bugzilla.redhat.com/show_bug.cgi?id=601006 · Patch
• https://bdu.fstec.ru/vul/2015-04590 · Security Note
• https://bdu.fstec.ru/vul/2015-01040 · Security Note
• https://bdu.fstec.ru/vul/2015-01056 · Security Note
• https://bdu.fstec.ru/vul/2015-01066 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01127 · Security Note
• https://bdu.fstec.ru/vul/2015-01067 · Security Note
• https://bdu.fstec.ru/vul/2015-01034 · Security Note
• https://bdu.fstec.ru/vul/2015-01088 · Security Note
• https://bdu.fstec.ru/vul/2015-01101 · Security Note
• https://bdu.fstec.ru/vul/2015-01033 · Security Note
• https://bdu.fstec.ru/vul/2015-01122 · Security Note
• https://bdu.fstec.ru/vul/2015-01126 · Security Note
• https://bdu.fstec.ru/vul/2015-01106 · Security Note