CVE-2010-2798: The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect si...

Security readout for executives and security teams

CVE-2010-2798 is a Linux kernel GFS2 filesystem flaw that can let a local user crash the system. The described impact is denial of service through a kernel NULL pointer dereference and panic during file rename activity on GFS2. Exposure is most likely on older Linux systems using GFS2 filesystems, especially shared-storage or cluster deployments, where local users can perform file renames. Systems not using GFS2, or running a vendor kernel with the referenced fixes, are less likely exposed. Treat this as an availability risk for legacy Linux and clustered GFS2 environments. It is not described as remotely exploitable, but a system panic can still interrupt business services. Patch during normal maintenance unless the environment relies heavily on GFS2 with broad local access. Mitigation focus: Apply vendor kernel updates that address CVE-2010-2798.; Move affected systems to Linux kernel 2.6.35 or a fixed vendor backport.; Restrict untrusted local access to systems with mounted GFS2 filesystems..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.