CVE-2010-1636
- State
- Published
- Severity
- Not scored
- Published
- Jun 7, 2010
- Updated
- Aug 7, 2024
- Reserved
- Apr 29, 2010
Description
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/579585
- [oss-security] 20100518 Re: kernel: btrfs: check for read permission on src file in the clone ioctlmailing-list
- [oss-security] 20100518 kernel: btrfs: check for read permission on src file in the clone ioctlmailing-list
- [oss-security] 20100525 Re: kernel: btrfs: check for read permission on src file in the clone ioctlmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=593226
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=5dc6416414fb3ec6e2825fd4d20c8bf1d7fe0395
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.