CVE-2006-1524 in Linux Kernel
Summary
madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability. NOTE: this description was originally written in a way that combined two separate issues. The mprotect issue now has a separate name, CVE-2006-2071.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
03/30/2006
Disclosure
04/19/2006
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 2177 | Linux Kernel Shared Memory mprotect access control | 264 | Proof-of-Concept | Official fix | CVE-2006-1524 |