CVE-2006-2935

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-05 · updated 2026-06-16
Weakness: CWE-120

Description

The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.

Affected products

Canonical Ubuntu Linux: 5.04, 5.10, 6.06
Debian Linux: 3.1
Linux kernel: from 2.2.16 through 2.16.16

References

http://bugzilla.kernel.org/show_bug.cgi?id=2966
http://secunia.com/advisories/21179
http://secunia.com/advisories/21298
http://secunia.com/advisories/21498
http://secunia.com/advisories/21605
http://secunia.com/advisories/21614
http://secunia.com/advisories/21695
http://secunia.com/advisories/21934
http://secunia.com/advisories/22082
http://secunia.com/advisories/22093
http://secunia.com/advisories/22174
http://secunia.com/advisories/22497

Get alerted when CVE-2006-2935 or the next vulnerability affects your stack