CVE-2006-5757

Severity: low (CVSS 1.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-06 · updated 2026-06-16
Weakness: CWE-17

Description

Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.

Affected products

Linux kernel: 2.6.0-test1, 2.6.0-test10, 2.6.0-test11, 2.6.0-test2, 2.6.0-test3, 2.6.0-test4 (+99)

References

http://projects.info-pull.com/mokb/MOKB-05-11-2006.html
http://rhn.redhat.com/errata/RHSA-2007-0014.html
http://secunia.com/advisories/22702
http://secunia.com/advisories/22746
http://secunia.com/advisories/23474
http://secunia.com/advisories/23593
http://secunia.com/advisories/23752
http://secunia.com/advisories/23997
http://secunia.com/advisories/24098
http://secunia.com/advisories/24206
http://secunia.com/advisories/25691
http://secunia.com/advisories/25714

Get alerted when CVE-2006-5757 or the next vulnerability affects your stack