CVE-2006-3635

MEDIUM

Linux Kernel < 2.6.25.20 - Denial of Service via IA64 RSE State Mishandling

Title source: llm
STIX 2.1

Description

The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted application that leverages the mishandling of invalid Register Stack Engine (RSE) state.

References (4)

Core 4
Core References
Release Notes, Third Party Advisory x_refsource_confirm
http://ftp.naist.jp/pub/linux/kernel/v2.6/ChangeLog-2.6.26
Issue Tracking, Patch, Third Party Advisory, VDB Entry x_refsource_confirm
https://bugzilla.suse.com/show_bug.cgi?id=199440

Scores

CVSS v3 5.5
EPSS 0.0053
EPSS Percentile 41.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (1)
linux/linux_kernel < 2.6.25.20
Published Aug 07, 2017
Tracked Since Feb 18, 2026