CVE-2006-1524
madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability.
Does this matter?
Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.
Description
madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability. NOTE: this description was originally written in a way that combined two separate issues. The mprotect issue now has a separate name, CVE-2006-2071.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 0.43% probability · 36th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- linux/linux kernel
- Source
- secalert@redhat.com
References
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6
- http://lwn.net/Alerts/180820/
- http://secunia.com/advisories/19657Patch, Vendor Advisory
- http://secunia.com/advisories/19664Vendor Advisory
- http://secunia.com/advisories/19735Vendor Advisory
- http://secunia.com/advisories/20398Vendor Advisory
- http://secunia.com/advisories/20671Vendor Advisory
- http://secunia.com/advisories/20914Vendor Advisory
- http://www.debian.org/security/2006/dsa-1097
- http://www.debian.org/security/2006/dsa-1103
- http://www.novell.com/linux/security/advisories/2006-05-31.html
- http://www.osvdb.org/24714
- http://www.securityfocus.com/bid/17587Patch
- http://www.vupen.com/english/advisories/2006/1391Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1475Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2554Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25870
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6
- http://lwn.net/Alerts/180820/
- http://secunia.com/advisories/19657Patch, Vendor Advisory
- http://secunia.com/advisories/19664Vendor Advisory
- http://secunia.com/advisories/19735Vendor Advisory
- http://secunia.com/advisories/20398Vendor Advisory
- http://secunia.com/advisories/20671Vendor Advisory
- http://secunia.com/advisories/20914Vendor Advisory
- http://www.debian.org/security/2006/dsa-1097
- http://www.debian.org/security/2006/dsa-1103
- http://www.novell.com/linux/security/advisories/2006-05-31.html
- http://www.osvdb.org/24714
- http://www.securityfocus.com/bid/17587Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.