386449 – Kernel: btrfs_ioctl_clone(): Overwriting of append-only files (CVE-2010-2537)

Bug 386449 - Kernel: btrfs_ioctl_clone(): Overwriting of append-only files (CVE-2010-2537)

Summary: Kernel: btrfs_ioctl_clone(): Overwriting of append-only files (CVE-2010-2537)

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Kernel (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Kernel Security

URL:
Whiteboard:	[linux < 2.6.35]
Keywords:

Depends on:
Blocks:

Reported:	2011-10-08 17:45 UTC by GLSAMaker/CVETool Bot
Modified:	2018-04-04 17:41 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description GLSAMaker/CVETool Bot gentoo-dev

2011-10-08 17:45:39 UTC

CVE-2010-2537 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2537):
  The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel
  before 2.6.35 allows local users to overwrite an append-only file via a (1)
  BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this
  file as a donor.

Comment 1 Leho Kraav (:macmaN @lkraav) 2015-02-17 18:38:26 UTC

IN_PROGRESS from 2011? Is this bug still relevant?

Comment 2 Aaron Bauman (RETIRED) gentoo-dev

2018-04-04 17:41:28 UTC

There are no longer any 2.x kernels available in the repository with the exception of sys-kernel/xbox-sources which is unsupported by security.