CVE-2010-2943

high-risk

Published 2010-09-30

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

Do I need to act?

3.8% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

15155

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.1/10 High

NETWORK / LOW complexity

Affected Products (20)

Linux Kernel

Ubuntu Linux

Esx

Aura Presence Services

Aura Session Manager

Aura System Manager

Aura System Platform

Aura Voice Portal

Ubuntu Linux

Esx

Aura Communication Manager

Aura Presence Services

Affected Vendors

Vmware Linux Canonical Avaya

References (50)

Broken Link http://article.gmane.org/gmane.comp.file-systems.xfs.general/33767

Broken Link http://article.gmane.org/gmane.comp.file-systems.xfs.general/33768

Broken Link http://article.gmane.org/gmane.comp.file-systems.xfs.general/33769

Broken Link http://article.gmane.org/gmane.comp.file-systems.xfs.general/33771

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=...

Broken Link http://oss.sgi.com/archives/xfs/2010-06/msg00191.html

Broken Link http://oss.sgi.com/archives/xfs/2010-06/msg00198.html

Broken Link http://secunia.com/advisories/42758

Broken Link http://secunia.com/advisories/43161

Broken Link http://secunia.com/advisories/46397

Third Party Advisory http://support.avaya.com/css/P8/documents/100113326

Broken Link http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35

Mailing List http://www.openwall.com/lists/oss-security/2010/08/18/2

Mailing List http://www.openwall.com/lists/oss-security/2010/08/19/5

Broken Link http://www.redhat.com/support/errata/RHSA-2010-0723.html

Third Party Advisory http://www.securityfocus.com/archive/1/520102/100/0/threaded

Exploit http://www.securityfocus.com/bid/42527

Third Party Advisory http://www.ubuntu.com/usn/USN-1041-1

and 30 more references

/ 100

high-risk

Severity 28/34 · Critical

Exploitability 14/34 · Moderate

Exposure 21/34 · High