CVE-2010-2226: The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check th...

Security readout for executives and security teams

This flaw affects old Linux kernels using XFS. A local user who already has write access could abuse the XFS SWAPEXT ioctl to read data they should not be able to read. It is not described as remote code execution, and the bundle does not show active exploitation. Exposure is most likely on legacy Linux systems running kernels before 2.6.35 with XFS support, especially systems allowing local users or applications write access to XFS-hosted files. Vendor kernels may differ, so distribution advisories are the authoritative exposure source. Treat as a legacy-system hygiene issue with data confidentiality impact. Prioritize internet-hosted shared systems, multi-user servers, and regulated data environments. It is not marked KEV and no active exploitation is cited, so urgency is lower than remotely exploitable kernel flaws. Mitigation focus: Apply vendor kernel security updates from the relevant Linux distribution or platform vendor.; Retire or isolate systems running affected legacy kernels until updates are confirmed.; Restrict local shell access and write access on XFS systems pending remediation..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.