CVE-2010-1641

CVE-2010-1641 describes an access restriction bypass vulnerability in the Linux kernel, specifically within the do_gfs2_set_flags function in fs/gfs2/file.c, affecting versions before 2.6.34-git10. This flaw allows local users to bypass intended access controls by issuing a SETFLAGS ioctl request without proper ownership verification. The vulnerability has a CVSS score of 4.6, indicating a medium severity. It requires local access (AV:L), has low attack complexity (AC:L), and no authentication (Au:N) is needed, potentially leading to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.