CVE-2010-1636: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor.

Affected products

• Linux Linux Kernel: version 2.6.29 only; version 2.6.29.1 only; version 2.6.29.2 only; version 2.6.29.3 only; version 2.6.29.4 only; version 2.6.29.5 only; …

Published 2010-06-08. Last modified 2026-06-16.