CVE-2010-2066: Medium severity linux kernel vulnerability
Description of problem: If the donor file is an append-only file, we should not allow the operation to proceed, lest we end up overwriting the contents of an append-only file.
Upstream commit: http://git.kernel.org/linus/1f5a81e41f8b1a782c68d3843e9ec1bfaadf7d72
Other sources
The mextcheckarguments function in fs/ext4/moveextent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVEEXT ioctl call that specifies this file as a donor.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2066?
The severity of CVE-2010-2066 is high due to the risk of overwriting data in append-only files.
How do I fix CVE-2010-2066?
To fix CVE-2010-2066, update your Linux kernel or affected software to a version that implements the necessary checks against overwriting append-only files.
Which systems are affected by CVE-2010-2066?
CVE-2010-2066 affects multiple systems including specific versions of the Linux kernel, VMware ESX, and Ubuntu Linux.
What is the impact of CVE-2010-2066?
The impact of CVE-2010-2066 includes potential data loss and corruption due to unauthorized overwriting of append-only files.
When was CVE-2010-2066 discovered?
CVE-2010-2066 was discovered and publicly acknowledged in 2010.