CVE-2010-2226
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not...
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
Exploit likelihood
What each source reports
NVD Score used
2.1
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
- Record
CVE-2010-2226- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
- Record
CVE-2010-2226- Updated
- 2026-11-02
EUVDEUVD-2010-2242 No score
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
- Record
EUVD-2010-2242- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2fg3-h938-jr6f No score
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not...
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
- Record
GHSA-2fg3-h938-jr6f- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:5.0 From an advisory covering 9 CVEs |
before 2.6.26-24lenny1, plus listed versions 2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15 Show 28 moreShow less2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19lenny12.6.26-19lenny22.6.26-19~bpo40+12.6.26-202.6.26-20~bpo40+12.6.26-212.6.26-21lenny12.6.26-21lenny22.6.26-21lenny32.6.26-21lenny42.6.26-21~bpo40+12.6.26-222.6.26-22lenny12.6.26-232.6.26-24 |
2.6.26-24lenny1 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:2.6.18-194.11.1.el5 | 0:2.6.18-194.11.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2226 is a low vulnerability (CVSS 2.1) in Debian Linux, published August 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2010-0610.html
archives.free.net.ph/message/20100616.135735.40f53a32.en.html
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63
ubuntu.com/usn/USN-1000-1
marc.info?l=oss-security&m=127687486331790&w=2
mandriva.com/security/advisories?name=MDVSA-2010:198
Show 51 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=605158
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35
lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
vupen.com/english/advisories/2011/0298
marc.info?l=oss-security&m=127677135609357&w=2
secunia.com/advisories/43315
archives.free.net.ph/message/20100616.130710.301704aa.en.html
debian.org/security/2010/dsa-2094
vmware.com/security/advisories/VMSA-2011-0003.html
securityfocus.com/bid/40920
securityfocus.com/archive/1/516397/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2010-2226
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1817176a86352f65210139d4c794ad2d19fc6b63
github.com/advisories/GHSA-2fg3-h938-jr6f
access.redhat.com/errata/RHSA-2010:0610
redhat.com/security/updates/classification
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.5_Technical_Notes/kernel.html
bugzilla.redhat.com/show_bug.cgi?id=576018
bugzilla.redhat.com/show_bug.cgi?id=586415
bugzilla.redhat.com/show_bug.cgi?id=601006
bugzilla.redhat.com/show_bug.cgi?id=607483
bugzilla.redhat.com/show_bug.cgi?id=607486
bugzilla.redhat.com/show_bug.cgi?id=608583
bugzilla.redhat.com/show_bug.cgi?id=612028
bugzilla.redhat.com/show_bug.cgi?id=612166
bugzilla.redhat.com/show_bug.cgi?id=612539
bugzilla.redhat.com/show_bug.cgi?id=613688
bugzilla.redhat.com/show_bug.cgi?id=613900
bugzilla.redhat.com/show_bug.cgi?id=615260
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0610.json
access.redhat.com/security/cve/CVE-2010-1084
cve.org/CVERecord?id=CVE-2010-1084
nvd.nist.gov/vuln/detail/CVE-2010-1084
access.redhat.com/security/cve/CVE-2010-2066
cve.org/CVERecord?id=CVE-2010-2066
nvd.nist.gov/vuln/detail/CVE-2010-2066
access.redhat.com/security/cve/CVE-2010-2070
cve.org/CVERecord?id=CVE-2010-2070
nvd.nist.gov/vuln/detail/CVE-2010-2070
access.redhat.com/security/cve/CVE-2010-2226
cve.org/CVERecord?id=CVE-2010-2226
access.redhat.com/security/cve/CVE-2010-2248
cve.org/CVERecord?id=CVE-2010-2248
nvd.nist.gov/vuln/detail/CVE-2010-2248
access.redhat.com/security/cve/CVE-2010-2521
cve.org/CVERecord?id=CVE-2010-2521
nvd.nist.gov/vuln/detail/CVE-2010-2521
access.redhat.com/security/cve/CVE-2010-2524
cve.org/CVERecord?id=CVE-2010-2524
nvd.nist.gov/vuln/detail/CVE-2010-2524