CVEvulnerability
CVE-2006-0744
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports an exception in the SYSRET instead of the next instruction, which causes the kernel exception handler to run on the user stack with the wrong GS.
Affected configurations
• linux linux kernel 2.6.0
• linux linux kernel 2.6.1
• linux linux kernel 2.6.2
• linux linux kernel 2.6.3
• linux linux kernel 2.6.4
• linux linux kernel 2.6.5
• linux linux kernel 2.6.6
• linux linux kernel 2.6.7
• linux linux kernel 2.6.8
• linux linux kernel 2.6.9
• linux linux kernel 2.6.10
• linux linux kernel 2.6.11
• linux linux kernel 2.6.11.1
• linux linux kernel 2.6.11.2
• linux linux kernel 2.6.11.3
• linux linux kernel 2.6.11.4
• linux linux kernel 2.6.11.5
• linux linux kernel 2.6.11.6
• linux linux kernel 2.6.11.7
• linux linux kernel 2.6.11.8
• linux linux kernel 2.6.11.9
• linux linux kernel 2.6.11.10
• linux linux kernel 2.6.11.11
• linux linux kernel 2.6.11.12
• linux linux kernel 2.6.12
• linux linux kernel 2.6.12.1
• linux linux kernel 2.6.12.2
• linux linux kernel 2.6.12.3
• linux linux kernel 2.6.12.4
• linux linux kernel 2.6.12.5
• linux linux kernel 2.6.12.6
• linux linux kernel 2.6.13
• linux linux kernel 2.6.13.1
• linux linux kernel 2.6.13.2
• linux linux kernel 2.6.13.3
• linux linux kernel 2.6.13.4
• linux linux kernel 2.6.14
• linux linux kernel 2.6.14.1
• linux linux kernel 2.6.14.2
• linux linux kernel 2.6.14.3
• linux linux kernel 2.6.14.4
• linux linux kernel 2.6.14.5
• linux linux kernel 2.6.14.6
• linux linux kernel 2.6.14.7
• linux linux kernel 2.6.15
• linux linux kernel 2.6.15.1
• linux linux kernel 2.6.15.2
• linux linux kernel 2.6.15.3
• linux linux kernel 2.6.15.4
• linux linux kernel 2.6.15.5
• linux linux kernel 2.6.15.6
• linux linux kernel 2.6.15.7
• linux linux kernel 2.6.16
• linux linux kernel 2.6.16.1
• linux linux kernel 2.6.16.2
• linux linux kernel 2.6.16.3
• linux linux kernel 2.6.16.4
• linux linux kernel 2.6.16 rc7
• linux linux kernel 2.6 test9 cvs
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.5 kernel.org
- http://lwn.net/Alerts/180820/ lwn.net
- http://secunia.com/advisories/19639 Vendor Advisory
- http://secunia.com/advisories/19735 Vendor Advisory
- http://secunia.com/advisories/20157 Vendor Advisory
- http://secunia.com/advisories/20237 Vendor Advisory
- http://secunia.com/advisories/20398 secunia.com
- http://secunia.com/advisories/20716 Vendor Advisory
- http://secunia.com/advisories/20914 Vendor Advisory
- http://secunia.com/advisories/21136 Vendor Advisory
- http://secunia.com/advisories/21179 Vendor Advisory
- http://secunia.com/advisories/21498 Vendor Advisory
- http://secunia.com/advisories/21745 Vendor Advisory
- http://secunia.com/advisories/21983 Vendor Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm support.avaya.com
- http://www.debian.org/security/2006/dsa-1103 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:086 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2006-05-31.html www.novell.com
- http://www.novell.com/linux/security/advisories/2006_42_kernel.html www.novell.com
- http://www.novell.com/linux/security/advisories/2006_47_kernel.html www.novell.com
- http://www.osvdb.org/24639 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2006-0437.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0493.html www.redhat.com
- http://www.securityfocus.com/bid/17541 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-302-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/1390 www.vupen.com
- http://www.vupen.com/english/advisories/2006/1475 www.vupen.com
- http://www.vupen.com/english/advisories/2006/2554 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25869 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9732 oval.cisecurity.org
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.5 kernel.org
- http://lwn.net/Alerts/180820/ lwn.net
- http://secunia.com/advisories/19639 Vendor Advisory
- http://secunia.com/advisories/19735 Vendor Advisory
- http://secunia.com/advisories/20157 Vendor Advisory
- http://secunia.com/advisories/20237 Vendor Advisory
- http://secunia.com/advisories/20398 secunia.com
- http://secunia.com/advisories/20716 Vendor Advisory
- http://secunia.com/advisories/20914 Vendor Advisory
- http://secunia.com/advisories/21136 Vendor Advisory
- http://secunia.com/advisories/21179 Vendor Advisory
- http://secunia.com/advisories/21498 Vendor Advisory
- http://secunia.com/advisories/21745 Vendor Advisory
- http://secunia.com/advisories/21983 Vendor Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm support.avaya.com
- http://www.debian.org/security/2006/dsa-1103 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:086 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2006-05-31.html www.novell.com
- http://www.novell.com/linux/security/advisories/2006_42_kernel.html www.novell.com
- http://www.novell.com/linux/security/advisories/2006_47_kernel.html www.novell.com
- http://www.osvdb.org/24639 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2006-0437.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0493.html www.redhat.com
- http://www.securityfocus.com/bid/17541 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-302-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/1390 www.vupen.com
- http://www.vupen.com/english/advisories/2006/1475 www.vupen.com
- http://www.vupen.com/english/advisories/2006/2554 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25869 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9732 oval.cisecurity.org