CVE-2006-1528

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-18 · updated 2026-06-16
Weakness: CWE-20

Description

Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (mmap) IO space.

Affected products

Linux kernel: 2.6.0-test1, 2.6.0-test10, 2.6.0-test11, 2.6.0-test2, 2.6.0-test3, 2.6.0-test4 (+83)

References

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1
http://linux.bkbits.net:8080/linux-2.6/cset%4043220081yu9ClBQNuqSSnW_9amW7iQ
http://marc.info/?l=linux-scsi&m=112540053711489&w=2
http://secunia.com/advisories/20237
http://secunia.com/advisories/20716
http://secunia.com/advisories/21045
http://secunia.com/advisories/21179
http://secunia.com/advisories/21498
http://secunia.com/advisories/21555
http://secunia.com/advisories/21745
http://secunia.com/advisories/22082
http://secunia.com/advisories/22093

Get alerted when CVE-2006-1528 or the next vulnerability affects your stack