Bug 386449

Summary:	Kernel: btrfs_ioctl_clone(): Overwriting of append-only files (CVE-2010-2537)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Kernel Security <security-kernel>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel, leho
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	[linux < 2.6.35]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2011-10-08 17:45:39 UTC

CVE-2010-2537 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2537):
  The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel
  before 2.6.35 allows local users to overwrite an append-only file via a (1)
  BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this
  file as a donor.

Comment 1 Leho Kraav (:macmaN @lkraav) 2015-02-17 18:38:26 UTC

IN_PROGRESS from 2011? Is this bug still relevant?

Comment 2 Aaron Bauman (RETIRED) gentoo-dev

2018-04-04 17:41:28 UTC

There are no longer any 2.x kernels available in the repository with the exception of sys-kernel/xbox-sources which is unsupported by security.