cve.bz

CVE-2010-2071

no score yetEPSS 0.5%

linux linux kernel: no CVSS score yet. EPSS 0.5% chance of exploitation in the next 30 days.

The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which allows local users to bypass file permissions by setting arbitrary ACLs, as demonstrated using setfacl.
EPSS
0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE
CWE-264
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON