CVEvulnerability
CVE-2006-1524
3.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-04-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability. NOTE: this description was originally written in a way that combined two separate issues. The mprotect issue now has a separate name, CVE-2006-2071.
Affected configurations
• linux linux kernel 2.6.16
• linux linux kernel 2.6.16.1
• linux linux kernel 2.6.16.2
• linux linux kernel 2.6.16.3
• linux linux kernel 2.6.16.4
• linux linux kernel 2.6.16.5
• linux linux kernel 2.6.16.6
Related
Weakness · not in database (1)
References
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6 kernel.org
- http://lwn.net/Alerts/180820/ lwn.net
- http://secunia.com/advisories/19657 Patch, Vendor Advisory
- http://secunia.com/advisories/19664 Vendor Advisory
- http://secunia.com/advisories/19735 Vendor Advisory
- http://secunia.com/advisories/20398 Vendor Advisory
- http://secunia.com/advisories/20671 Vendor Advisory
- http://secunia.com/advisories/20914 Vendor Advisory
- http://www.debian.org/security/2006/dsa-1097 www.debian.org
- http://www.debian.org/security/2006/dsa-1103 www.debian.org
- http://www.novell.com/linux/security/advisories/2006-05-31.html www.novell.com
- http://www.osvdb.org/24714 www.osvdb.org
- http://www.securityfocus.com/bid/17587 Patch
- http://www.vupen.com/english/advisories/2006/1391 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1475 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2554 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25870 exchange.xforce.ibmcloud.com
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6 kernel.org
- http://lwn.net/Alerts/180820/ lwn.net
- http://secunia.com/advisories/19657 Patch, Vendor Advisory
- http://secunia.com/advisories/19664 Vendor Advisory
- http://secunia.com/advisories/19735 Vendor Advisory
- http://secunia.com/advisories/20398 Vendor Advisory
- http://secunia.com/advisories/20671 Vendor Advisory
- http://secunia.com/advisories/20914 Vendor Advisory
- http://www.debian.org/security/2006/dsa-1097 www.debian.org
- http://www.debian.org/security/2006/dsa-1103 www.debian.org
- http://www.novell.com/linux/security/advisories/2006-05-31.html www.novell.com
- http://www.osvdb.org/24714 www.osvdb.org
- http://www.securityfocus.com/bid/17587 Patch
- http://www.vupen.com/english/advisories/2006/1391 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1475 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2554 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25870 exchange.xforce.ibmcloud.com