CVE-2010-2538

Published: Sep 30, 2010Modified: Apr 29, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive information via a BTRFS_IOC_CLONE_RANGE ioctl call.

Affected (7)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Server

1 product

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.35

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 9.10

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp1
Suse Linux Enterprise High Availability Extension	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (20)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ebc3464781ad24474abcbd2274e6254689853b5

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/42758

Source: secalert@redhat.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35

Source: secalert@redhat.com

Broken Link

http://www.openwall.com/lists/oss-security/2010/07/21/10

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2010/07/21/4

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/41854

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1041-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0070

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=616998

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ebc3464781ad24474abcbd2274e6254689853b5