vulnerability note CVE-2010-2525

Linux kernel: changing GFS2 ACL

Synthesis of the vulnerability

A local attacker can change ACLs of GFS2 files, in order to access to them.

Severity: 2/4. Creation date: 09/07/2010.

Description of the vulnerability

The Linux kernel supports GFS/GFS2 (Global File System). The fs/gfs2/acl.c file manages ACLs (Access Control List) on GFS2 files. However, a user can alter ACLs on all files, even if he's not the owner of the file. A local attacker can therefore change ACLs of GFS2 files, in order to access to them.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: Linux kernel: changing GFS2 ACL. Keywords: ACLs Access Control File GFS GFS2 Global Linux List System changing gfs2 kernel. Identifiers: BID-41516, CVE-2010-2525, VIGILANCE-VUL-9749.

Information sources

Publications and announces Source example: GFS2: Fix up system xattrs

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Security vulnerability alerts