What’s Vulnerable › Vulnerabilities

CVE-2006-1525

• Severity: medium (CVSS 4.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-04-19 · updated 2026-06-16
• Weakness: CWE-399

Description

ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a multicast IP address, which triggers a null dereference.

Affected products

• Linux kernel: 2.6.0, 2.6.1, 2.6.1-rc1, 2.6.1-rc2, 2.6.1-rc3, 2.6.2 (+125)

References

• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.8
• http://lwn.net/Alerts/180820/
• http://secunia.com/advisories/19709
• http://secunia.com/advisories/19735
• http://secunia.com/advisories/19955
• http://secunia.com/advisories/20157
• http://secunia.com/advisories/20237
• http://secunia.com/advisories/20398
• http://secunia.com/advisories/20671
• http://secunia.com/advisories/20914
• http://secunia.com/advisories/21476
• http://secunia.com/advisories/21745

Get alerted when CVE-2006-1525 or the next vulnerability affects your stack