PT-2006-3552 · Linux · Linux Kernel

Tony Griffiths · Published 2006-05-27 · Updated 2017-07-20 · CVE-2006-2629

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.15 through 2.6.17

Description A race condition issue exists that allows local users to cause a denial of service by creating and exiting a large number of tasks and then accessing the /proc entry of a task that is exiting. This leads to memory corruption, resulting in a failure in the prune dcache function or a BUG ON error in include/linux/list.h.

Recommendations For Linux kernel versions 2.6.15 through 2.6.17, consider applying a patch to fix the race condition issue, or as a temporary workaround, restrict the creation of tasks to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-2629

Affected Products

Linux Kernel

References · 8

• 🔥 https://exploit-db.com/exploits/27925 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2629 · Security Note
• http://osvdb.org/25847 · Note
• http://secunia.com/advisories/20349 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26746 · Note
• http://marc.info/?l=linux-kernel&m=114860432801543&w=2 · Note
• http://vupen.com/english/advisories/2006/2070 · Note
• http://securityfocus.com/bid/18183 · Note