CVE-2006-5823: linux linux_kernel

Modified

Published 09-11-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-5823 is a medium (CVSS 4.0) vulnerability in linux linux_kernel. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 31.9% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.0/10

010

Medium · v2.0 (NVD)

EPSS score

0.38%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5

DSA-1503-1 DSA-1503-2 DSA-1504-1 RHSA-2007:0014 RHSA-2007:0436

Timeline

09-11-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs.

CVSS metrics

1 score · 1 source · 1 version

v2.04.0

EPSS trend

Probability

0.38%

Chance of exploitation in the next 30 days

Percentile

32%

Versus all other CVEs

30-day change

Increase +0.01 pp

From 0.37% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel2.6.0 | 2.6.0:test1 | 2.6.0:test10 | 2.6.0:test11 | 2.6.0:test2 | 2.6.0:test3 | 2.6.0:test4 | 2.6.0:test5 | 2.6.0:test6 | 2.6.0:test7 | 2.6.0:test8 | 2.6.0:test9 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.1:rc3 | 2.6.2 | 2.6.2:rc1 | 2.6.2:rc2 | 2.6.2:rc3 | 2.6.3 | 2.6.3:rc1 | 2.6.3:rc2 | 2.6.3:rc3 | 2.6.3:rc4 | 2.6.4 | 2.6.4:rc1 | 2.6.4:rc2 | 2.6.4:rc3 | 2.6.5 | 2.6.5:rc1 | 2.6.5:rc2 | 2.6.5:rc3 | 2.6.6 | 2.6.6:rc1 | 2.6.6:rc2 | 2.6.6:rc3 | 2.6.7 | 2.6.7:rc1 | 2.6.7:rc2 | 2.6.7:rc3 | 2.6.8 | 2.6.8:rc1 | 2.6.8:rc2 | 2.6.8:rc3 | 2.6.8:rc4 | 2.6.8.1 | 2.6.8.1.5 | 2.6.9 | 2.6.9:2.6.20 | 2.6.9:rc1 | 2.6.9:rc2 | 2.6.9:rc3 | 2.6.9:rc4 | 2.6.10 | 2.6.10:rc1 | 2.6.10:rc2 | 2.6.10:rc3 | 2.6.11 | 2.6.11:rc1 | 2.6.11:rc2 | 2.6.11:rc3 | 2.6.11:rc4 | 2.6.11:rc5 | 2.6.11.1 | 2.6.11.2 | 2.6.11.3 | 2.6.11.4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.9 | 2.6.11.10 | 2.6.11.11 | 2.6.11.12 | 2.6.11_rc1_bk6 | 2.6.12 | 2.6.12:rc1 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 2.6.12:rc6 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13:rc1 | 2.6.13:rc2 | 2.6.13:rc3 | 2.6.13:rc4 | 2.6.13:rc5 | 2.6.13:rc6 | 2.6.13:rc7 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.14 | 2.6.14:rc1 | 2.6.14:rc2 | 2.6.14:rc3 | 2.6.14:rc4 | 2.6.14:rc5 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.14.6 | 2.6.14.7 | 2.6.15 | 2.6.15:rc1 | 2.6.15:rc2 | 2.6.15:rc3 | 2.6.15:rc4 | 2.6.15:rc5 | 2.6.15:rc6 | 2.6.15:rc7 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.15.6 | 2.6.15.7 | 2.6.16 | 2.6.16:rc1 | 2.6.16:rc2 | 2.6.16:rc3 | 2.6.16:rc4 | 2.6.16:rc5 | 2.6.16:rc6 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16.17 | 2.6.16.18 | 2.6.16.19 | 2.6.16.20 | 2.6.16.21 | 2.6.16.22 | 2.6.16.23 | 2.6.16.24 | 2.6.16.27 | 2.6.16.30 | 2.6.16_rc7 | 2.6.17 | 2.6.17:rc1 | 2.6.17:rc2 | 2.6.17:rc3 | 2.6.17:rc4 | 2.6.17:rc5 | 2.6.17:rc6 | 2.6.17.1 | 2.6.17.2 | 2.6.17.3 | 2.6.17.4 | 2.6.17.5 | 2.6.17.6 | 2.6.17.7 | 2.6.17.8 | 2.6.17.9 | 2.6.17.10 | 2.6.17.11 | 2.6.17.12 | 2.6.17.13 | 2.6.17.14 | 2.6.18 | 2.6.18:rc1 | 2.6.18:rc2 | 2.6.18:rc5 | 2.6.18.1 | 2.6.19 | 2.6.19:rc1 | 2.6_test9_cvs

1 vendor · 1 product

References

22 links

rhn.redhat.com/errata/RHSA-2007-0436.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/24098Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_79_kernel.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/24259Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2007-0014.htmlVendor AdvisoryX Refsource REDHAT
projects.info-pull.com/mokb/MOKB-07-11-2006.htmlX Refsource MISC
www.mandriva.com/security/advisories?name=MDKSA-2007:047Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/22767Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2007-063.htmX Refsource CONFIRM
www.ubuntu.com/usn/usn-416-1Vendor AdvisoryX Refsource UBUNTU

Show all 22 references

www.debian.org/security/2008/dsa-1504Vendor AdvisoryX Refsource DEBIAN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10588VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/24206Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23474Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23997Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/471457Mailing ListX Refsource BUGTRAQ
secunia.com/advisories/24482Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1503Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/29058Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25630Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25691Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:060Vendor AdvisoryX Refsource MANDRIVA