CVE-2010-2526

MEDIUM 4.6CVE-2010-2526 · Published 05/08/2010 · updated 16/06/2026

In short

CVE-2010-2526 is a MEDIUM (CVSS 4.6) vulnerability affecting lvm2 (heinz mauelshagen).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
lvm2 heinz_mauelshagen	`= 2.02.50= 2.02.51= 2.02.52= 2.02.53= 2.02.54= 2.02.55= 2.02.56= 2.02.57= 2.02.58= 2.02.59= 2.02.60= 2.02.61= 2.02.62= 2.02.63= 2.02.64= 2.02.65= 2.02.66= 2.02.67= 2.02.68= 2.02.69= 2.02.70≤ 2.02.71`	No fix yet

Description

The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exit or logical-volume change) or possibly have unspecified other impact via crafted control commands.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free