CVE ID:	CVE-2010-2226
Description:	The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
Test IDs:	1.3.6.1.4.1.25623.1.0.880569   1.3.6.1.4.1.25623.1.0.67747   1.3.6.1.4.1.25623.1.0.67981   1.3.6.1.4.1.25623.1.0.67956
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2226 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX http://www.securityfocus.com/archive/1/516397/100/0/threaded 40920 http://www.securityfocus.com/bid/40920 43315 http://secunia.com/advisories/43315 ADV-2011-0298 http://www.vupen.com/english/advisories/2011/0298 DSA-2094 http://www.debian.org/security/2010/dsa-2094 MDVSA-2010:198 http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 RHSA-2010:0610 http://www.redhat.com/support/errata/RHSA-2010-0610.html SUSE-SA:2010:060 http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html SUSE-SA:2011:007 http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html USN-1000-1 http://www.ubuntu.com/usn/USN-1000-1 [oss-security] 20100617 CVE request - kernel: xfs swapext ioctl issue http://marc.info/?l=oss-security&m=127677135609357&w=2 [oss-security] 20100618 Re: CVE request - kernel: xfs swapext ioctl issue http://marc.info/?l=oss-security&m=127687486331790&w=2 [xfs] 20100616 Re: [Security] XFS swapext ioctl minor security issues http://archives.free.net.ph/message/20100616.130710.301704aa.en.html [xfs] 20100616 Re: [Security] XFS swapext ioctl minor security issues http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 http://www.vmware.com/security/advisories/VMSA-2011-0003.html http://www.vmware.com/security/advisories/VMSA-2011-0003.html https://bugzilla.redhat.com/show_bug.cgi?id=605158 https://bugzilla.redhat.com/show_bug.cgi?id=605158