CVE-2006-4093

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-21 · updated 2026-06-16

Description

Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a denial of service (crash) related to the "HID0 attention enable on PPC970 at boot time."

Affected products

Canonical Ubuntu Linux: 5.04, 5.10, 6.06
Debian Linux: 3.1
Linux kernel: from 2.4.0 before 2.4.33.1; from 2.6.0 before 2.6.17.9 — fixed in 2.4.33.1, 2.6.17.9

How to fix

Upgrade to a fixed version: Linux kernel 2.4.33.1, 2.6.17.9. Check the vendor advisory for mitigations.

References

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.9
http://secunia.com/advisories/21563
http://secunia.com/advisories/21695
http://secunia.com/advisories/21847
http://secunia.com/advisories/21934
http://secunia.com/advisories/22093
http://secunia.com/advisories/22148
http://secunia.com/advisories/22292
http://secunia.com/advisories/22945
http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm
http://www.debian.org/security/2006/dsa-1184

Get alerted when CVE-2006-4093 or the next vulnerability affects your stack