CVE-2006-3626
N/A
Published: July 15, 2006 at 01:06 AM UTC
Updated: June 16, 2026 at 10:27 PM UTC
1 product affected across 1 vendorLinux Kernel
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.6.162.6.16 rc12.6.16 rc22.6.16 rc32.6.16 rc42.6.16 rc52.6.16 rc62.6.16.12.6.16.102.6.16.112.6.16.122.6.16.132.6.16.142.6.16.152.6.16.162.6.16.172.6.16.182.6.16.192.6.16.22.6.16.202.6.16.212.6.16.222.6.16.232.6.16.242.6.16.32.6.16.42.6.16.52.6.16.62.6.16.72.6.16.82.6.16.92.6.172.6.17 rc12.6.17 rc22.6.17 rc32.6.17 rc42.6.17 rc52.6.17 rc62.6.17.12.6.17.22.6.17.32.6.17.4
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://www.debian.org/security/2006/dsa-1111
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:124
- http://www.novell.com/linux/security/advisories/2006_17_sr.html
- http://www.novell.com/linux/security/advisories/2006_42_kernel.html
- http://www.novell.com/linux/security/advisories/2006_47_kernel.html
References (29)
x_refsource_CONFIRM
Source: [email protected]
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5Mailing Listx_refsource_FULLDISC
Source: [email protected]
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047907.htmlQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card