CVE-2006-6058

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-22 · updated 2026-06-16
Weakness: CWE-189

Description

The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overflow or signedness error.

Affected products

Linux kernel: 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5 (+176)

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24
http://projects.info-pull.com/mokb/MOKB-17-11-2006.html
http://secunia.com/advisories/23034
http://secunia.com/advisories/26379
http://secunia.com/advisories/27528
http://secunia.com/advisories/27614
http://secunia.com/advisories/27703
http://secunia.com/advisories/28141
http://secunia.com/advisories/28170
http://secunia.com/advisories/28654
http://secunia.com/advisories/28706
http://secunia.com/advisories/28971

Get alerted when CVE-2006-6058 or the next vulnerability affects your stack