Vulnerability in Linux Kernel
CVE-2006-0557
sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the get_nodes function, which has unknown impact and attack vectors.
EPSS: 0.005 (37.1th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.6.0, 2.6.1, 2.6.2
- N/a — versions n/a
References
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (vdb-entry, x_refsource_SECTRACK)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (vdb-entry, x_refsource_VUPEN)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_UBUNTU, vendor-advisory)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_OSVDB, vdb-entry)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_CONFIRM)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (vdb-entry, x_refsource_BID)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (vdb-entry, x_refsource_XF)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_CONFIRM)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (vendor-advisory, x_refsource_SUSE)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_SECUNIA, third-party-advisory)