CVE-2010-2943 EXPLOIT
8.1
HIGH · CVSS 3.1 · EPSS 17% (pctl 97)
Patch early
A public exploit exists.
Description
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.
Scoring
| CVSS | 8.1 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| EPSS | 17.01% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-200 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2010-09-30 |
| Last modified | 2026-06-16 |
Affected (10)
| Vendor | Product |
|---|---|
| avaya | aura communication manager |
| avaya | aura presence services |
| avaya | aura session manager |
| avaya | aura system manager |
| avaya | aura system platform |
| avaya | aura voice portal |
| avaya | iq |
| canonical | ubuntu linux |
| linux | linux kernel |
| vmware | esx |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | XFS - Deleted Inode Local Information Disclosure | 2010-09-29 |
References
- http://article.gmane.org/gmane.comp.file-systems.xfs.general/33767
- http://article.gmane.org/gmane.comp.file-systems.xfs.general/33768
- http://article.gmane.org/gmane.comp.file-systems.xfs.general/33769
- http://article.gmane.org/gmane.comp.file-systems.xfs.general/33771
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1920779e67cbf5ea8afef317777c5bf2b8096188
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7124fe0a5b619d65b739477b3b55a20bf805b06d
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7b6259e7a83647948fa33a736cc832310c8d85aa
- http://oss.sgi.com/archives/xfs/2010-06/msg00191.html
- http://oss.sgi.com/archives/xfs/2010-06/msg00198.html
- http://secunia.com/advisories/42758
- http://secunia.com/advisories/43161
- http://secunia.com/advisories/46397
- http://support.avaya.com/css/P8/documents/100113326
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35
- http://www.openwall.com/lists/oss-security/2010/08/18/2
- http://www.openwall.com/lists/oss-security/2010/08/19/5
- http://www.redhat.com/support/errata/RHSA-2010-0723.html
- http://www.securityfocus.com/archive/1/520102/100/0/threaded
- http://www.securityfocus.com/bid/42527
- http://www.ubuntu.com/usn/USN-1041-1
→ the Explorer · watch your stack · NVD