CVE-2006-3626

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

CVSS v2.0

6.2 MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:C

EPSS

2.20% chance of exploitation in the next 30 days, 81th percentile

Published

2006-07-15

Updated

2024-08-07

Exploit collections (1)

• helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2006/CVE-2006-3626

References

• CVE Record
• NVD entry

Related

• CVE-2006-3624
• CVE-2006-3636
• CVE-2006-3621
• CVE-2006-3637
• CVE-2006-3616
• CVE-2006-3653