CVE-2007-6206
Linux kernel <2.6.24-rc3 - Info Disclosure
Title source: llmDescription
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
References (39)
... and 19 more
Scores
EPSS
0.0008
EPSS Percentile
22.5%
Classification
CWE
CWE-200
Status
draft
Affected Products (21)
linux/linux_kernel
< 2.4.35.2
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
opensuse/opensuse
opensuse/opensuse
suse/linux_enterprise_desktop
suse/linux_enterprise_real_time_extension
suse/linux_enterprise_server
suse/linux_enterprise_software_development_kit
redhat/enterprise_linux_desktop
redhat/enterprise_linux_eus
redhat/enterprise_linux_server
redhat/enterprise_linux_workstation
... and 6 more
Timeline
Published
Dec 04, 2007
Tracked Since
Feb 18, 2026