CVE-2006-2629
Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of service (crash) by creating and exiting a large number of tasks, then accessing the /proc entry of a task that is exiting, which…
Does this matter?
Lower severity and a low EPSS score (0.65%). Track it; it rarely justifies an emergency change on its own.
Description
Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of service (crash) by creating and exiting a large number of tasks, then accessing the /proc entry of a task that is exiting, which causes memory corruption that leads to a failure in the prune_dcache function or a BUG_ON error in include/linux/list.h.
- CVSS 2.0
- 4.0 MEDIUMAV:L/AC:H/Au:N/C:N/I:N/A:C
- EPSS
- 0.65% probability · 49th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- cve@mitre.org
References
- http://marc.info/?l=linux-kernel&m=114860432801543&w=2
- http://secunia.com/advisories/20349
- http://www.osvdb.org/25847
- http://www.securityfocus.com/bid/18183
- http://www.vupen.com/english/advisories/2006/2070
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26746
- http://marc.info/?l=linux-kernel&m=114860432801543&w=2
- http://secunia.com/advisories/20349
- http://www.osvdb.org/25847
- http://www.securityfocus.com/bid/18183
- http://www.vupen.com/english/advisories/2006/2070
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26746
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.