Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2010-2537: Linux kernel Btrfs clone can overwrite append-only files
CVE-2010-2537 · published 16 years ago
Summary
On Linux systems using the Btrfs file system and kernel versions older than 2.6.35, a local user can replace the contents of a file that is set to "append‑only" with other data. This defeats the protection that should keep the file from being changed, potentially leading to data loss or tampering. Update the Linux kernel to a version newer than 2.6.35 or apply the available security patch to stop the issue.
What to do
- Update linux linux_kernel to version 2.6.35 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel |
< 2.6.35 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| canonical | ubuntu_linux |
9.10 10.04 10.10 cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:* |
| suse | linux_enterprise_high_availability_extension |
11 cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:* |
| suse | suse_linux_enterprise_desktop |
11 cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:* |
| suse | suse_linux_enterprise_server |
11 cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:* |
Original advisory text
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl...
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=...
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html Mailing List Third Party Advisory
- http://secunia.com/advisories/42758 Broken Link
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 Broken Link
- http://www.openwall.com/lists/oss-security/2010/07/21/10 Mailing List Patch Third Party Advisory
- http://www.openwall.com/lists/oss-security/2010/07/21/4 Mailing List Patch Third Party Advisory
- http://www.securityfocus.com/bid/41847 Third Party Advisory VDB Entry
- http://www.ubuntu.com/usn/USN-1041-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0070 Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=616998 Issue Tracking Patch Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Sep 2010
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-2537 · NVD
Track software like this
Free during beta