SB2006041901 - Security restrictions bypass in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2006041901

SB2006041901 - Security restrictions bypass in Linux kernel

Published: April 19, 2006

Security Bulletin ID SB2006041901
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Security restrictions bypass (CVE-ID: CVE-2006-1524)

The vulnerability allows a local user to read and manipulate data.

madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability. NOTE: this description was originally written in a way that combined 2 separate issues. The mprotect issue now has a separate name, CVE-2006-2071.


Remediation

Install update from vendor's website.

References