CVE-2010-2071

The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which…

published June 16, 2010

CVSS
—
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which allows local users to bypass file permissions by setting arbitrary ACLs, as demonstrated using setfacl.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.3th percentile
Published
2010-06-16T20:00Z
EPSS history
Timeline
  • 16 JUN 20:00Z
    The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which…
    cvelistv5