CVE-2010-3078: The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does...

Security readout for executives and security teams

This is a Linux kernel information leak in old XFS filesystem code. A local user could trigger an ioctl path and receive data left in kernel stack memory. The source bundle does not show remote exploitation or active exploitation. Business urgency depends on whether legacy Linux or appliance systems still run affected kernel builds. Exposure is most likely on legacy Linux systems, vendor kernels, appliances, or virtualization platforms from the 2010-2011 era with affected XFS code. The bundle lists Ubuntu, SUSE, Red Hat, VMware, and upstream Linux references, but does not provide a complete affected-version matrix. Handle as a legacy exposure management issue. It is not presented as internet-exploitable or actively exploited, but old unpatched kernels on shared systems can turn a local information leak into meaningful security risk. Mitigation focus: Apply the relevant vendor kernel update for affected distributions or platforms.; Verify upstream fix inclusion at or after Linux 2.6.36-rc4 or vendor backport.; Prioritize patching systems with untrusted local users or shared shell access..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.