CVE-2010-2525
First published: Tue Jun 22 2021(Updated: )
A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker could exploit this flaw to gain access or execute any file stored in the gfs2 file system.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel | =2.6.33-rc1 | |
| debian/linux-2.6 | ||
| Linux Kernel | =2.6.33-rc1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2646a1f61a3b5525914757f10fa12b5b94713648
- https://ubuntu.com/security/CVE-2010-2525
- https://launchpad.net/bugs/cve/CVE-2010-2525
- https://security-tracker.debian.org/tracker/CVE-2010-2525
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2525
- https://nvd.nist.gov/vuln/detail/CVE-2010-2525
Frequently Asked Questions
What is the severity of CVE-2010-2525?
CVE-2010-2525 is considered a high-severity vulnerability due to the potential for unprivileged local attackers to access or execute files.
How do I fix CVE-2010-2525?
To fix CVE-2010-2525, you should update the gfs2 file system handling in the Linux kernel to the patched version that addresses this vulnerability.
Who is affected by CVE-2010-2525?
CVE-2010-2525 affects users of the gfs2 file system on certain versions of the Linux kernel, particularly around 2.6.33-rc1.
What type of attack is possible with CVE-2010-2525?
An unprivileged local attacker can exploit CVE-2010-2525 to gain unauthorized access to files within the gfs2 file system.
When was CVE-2010-2525 last updated?
CVE-2010-2525 was last updated on 24 July 2024.
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/remedy
- agent/references
- agent/first-publish-date
- agent/event
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- agent/author
- agent/softwarecombine
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-index
- agent/description
- vendor/linux
- canonical/linux kernel
- version/linux kernel/2.6.33-rc1
- package-manager/debian