Search/CVE-2010-2943
● CVE — High

CVE-2010-2943

Vendorlinux, canonical, avaya, vmwareProductlinux kernel, ubuntu linux, aura communication manager, aura session manager, aura system manager, iq, esx, aura system platform, aura presence services, aura voice portalDiscoveredSep 30, 2010UpdatedApr 29, 2026

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

View graph Watch Export
CVSS v3.1
8.1 HIGH
EPSS
17.0%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Connections
11 relationships
Timeline
disclosure → media coverage
Sep 30, 2010
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026