CVE-2010-1146

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.33.2 and earlier

Description The issue allows local users to gain privileges by modifying extended attributes or ACLs when a ReiserFS filesystem exists. This can be achieved by deleting a file under .reiserfs priv/xattrs/.

Recommendations For Linux kernel versions 2.6.33.2 and earlier, restrict read or write access to the .reiserfs priv directory to prevent local users from gaining privileges.