CVE-2010-2943
Fixed in a distro release EPSS 17%
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.
Products: linux_kernel, canonical ubuntu_linux, vmware esx, avaya aura_communication_manager, avaya aura_presence_services, avaya aura_session_manager, avaya aura_system_manager, avaya aura_system_platform, avaya aura_voice_portal, avaya iq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 5 | kernel | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-PAE | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-PAE-debuginfo | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-PAE-devel | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-debug | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-debug-debuginfo | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-debug-devel | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-debuginfo | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-debuginfo-common | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-devel | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-doc | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-headers | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-kdump | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-kdump-debuginfo | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-kdump-devel | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-xen | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-xen-debuginfo | 0:2.6.18-194.17.1.el5 |
| Red Hat Enterprise Linux 5 | kernel-xen-devel | 0:2.6.18-194.17.1.el5 |