CVE-2010-2538

published 2010-09-30

CVE-2010-2538: Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive information via a BTRFS_IOC_CLONE_RANGE ioctl call.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
linux	linux_kernel	< 2.6.35	2.6.35
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_high_availability_extension	—	—
suse	linux_enterprise_server	—	—

CWE-200