Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-2943

Fixed in a distro release EPSS 17%

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

Published 2010-09-30 · CVE record · OSV

Products: linux_kernel, canonical ubuntu_linux, vmware esx, avaya aura_communication_manager, avaya aura_presence_services, avaya aura_session_manager, avaya aura_system_manager, avaya aura_system_platform, avaya aura_voice_portal, avaya iq

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 5kernel0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-PAE0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-PAE-debuginfo0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-PAE-devel0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-debug0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-debug-debuginfo0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-debug-devel0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-debuginfo0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-debuginfo-common0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-devel0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-doc0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-headers0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-kdump0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-kdump-debuginfo0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-kdump-devel0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-xen0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-xen-debuginfo0:2.6.18-194.17.1.el5
Red Hat Enterprise Linux 5kernel-xen-devel0:2.6.18-194.17.1.el5