CVE-2006-1524

Linux kernel <2.6.16.7 - Privilege Escalation

Title source: llm
STIX 2.1

Description

madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability. NOTE: this description was originally written in a way that combined two separate issues. The mprotect issue now has a separate name, CVE-2006-2071.

References (17)

Core 17
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25870
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19735
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2554
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1391
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19664
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17587
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1475
Various Sources vendor-advisory x_refsource_fedora
http://lwn.net/Alerts/180820/
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1097
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006-05-31.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1103
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/24714
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20398
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19657
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20671
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20914

Scores

EPSS 0.0043
EPSS Percentile 35.3%

Details

CWE
CWE-264
Status published
Products (7)
linux/linux_kernel 2.6.16
linux/linux_kernel 2.6.16.1
linux/linux_kernel 2.6.16.2
linux/linux_kernel 2.6.16.3
linux/linux_kernel 2.6.16.4
linux/linux_kernel 2.6.16.5
linux/linux_kernel 2.6.16.6
Published Apr 19, 2006
Tracked Since Feb 18, 2026