CVE-2010-1146

CVE-2010-1146 describes a local privilege escalation vulnerability in the Linux kernel, specifically affecting versions 2.6.33.2 and earlier when a ReiserFS filesystem is present. The flaw allows local users to gain elevated privileges by manipulating extended attributes or Access Control Lists within the unrestricted .reiserfs_priv directory. This vulnerability has a CVSS score of 6.9, indicating high impact on confidentiality, integrity, and availability, with a local attack vector and medium attack complexity. While not listed on the KEV catalog or Hot List, an exploit demonstrating local privilege escalation via xattr manipulation exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.