Is CVE-2010-2226 being actively exploited?

CVE-2010-2226 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2010-2226?

CVE-2010-2226 has a CVSS 2.0 base score of 2.1 (LOW).

CVE-2010-2226

LOW · CVSS 2.1EPSS 0.4%EU EUVD

The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.

Key facts

CVSS score: 2.1 (v2.0)
Severity: LOW
CVSS vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness (CWE): CWE-200
EPSS score: 0.4% (38th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2010-2242)
Published: September 3, 2010
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2010-2242 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
debian / debian linux
linux / linux kernel
suse / linux enterprise desktop
suse / linux enterprise server
suse / linux enterprise software development kit

References

http://archives.free.net.ph/message/20100616.130710.301704aa.en.html(Broken Link)
http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html(Broken Link)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html(Mailing List, Third Party Advisory)
http://marc.info/?l=oss-security&m=127677135609357&w=2(Third Party Advisory)
http://marc.info/?l=oss-security&m=127687486331790&w=2(Third Party Advisory)
http://secunia.com/advisories/43315(Third Party Advisory)
http://www.debian.org/security/2010/dsa-2094(Third Party Advisory)
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35(Broken Link)
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2010-0610.html(Third Party Advisory)
http://www.securityfocus.com/archive/1/516397/100/0/threaded(Third Party Advisory, VDB Entry)
http://www.securityfocus.com/bid/40920(Third Party Advisory, VDB Entry)
http://www.ubuntu.com/usn/USN-1000-1(Third Party Advisory)
http://www.vmware.com/security/advisories/VMSA-2011-0003.html(Third Party Advisory)
http://www.vupen.com/english/advisories/2011/0298(Third Party Advisory)
https://bugzilla.redhat.com/show_bug.cgi?id=605158(Issue Tracking, Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain