CVE-2010-2526: Heinz Mauelshagen LVM2

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exit or logical-volume change) or possibly have unspecified other impact via crafted control commands.

Affected products

• Heinz Mauelshagen LVM2: up to and including 2.02.71; version 2.02.50 only; version 2.02.51 only; version 2.02.52 only; version 2.02.53 only; version 2.02.54 only; …

Published 2010-08-05. Last modified 2026-06-16.