CVE-2006-2071

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-27 · updated 2026-06-16

Description

Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs.

Affected products

Linux kernel: 2.4.0, 2.4.0-test1, 2.4.0-test10, 2.4.0-test11, 2.4.0-test12, 2.4.0-test2 (+150)

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6
http://secunia.com/advisories/20157
http://secunia.com/advisories/20716
http://secunia.com/advisories/21035
http://secunia.com/advisories/22292
http://secunia.com/advisories/22497
http://secunia.com/advisories/22875
http://secunia.com/advisories/22945
http://secunia.com/advisories/23064
http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b78b6af66a5fbaf17d7e6bfc32384df5e34408c8

Get alerted when CVE-2006-2071 or the next vulnerability affects your stack