CVE-2006-0744

Published: Apr 18, 2006Modified: Apr 16, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports an exception in the SYSRET instead of the next instruction, which causes the kernel exception handler to run on the user stack with the wrong GS.

Affected (138)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

138 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.0
Linux Linux Kernel	Version 2.6.0 test10
Linux Linux Kernel	Version 2.6.0 test11
Linux Linux Kernel	Version 2.6.0 test1
Linux Linux Kernel	Version 2.6.0 test2
Linux Linux Kernel	Version 2.6.0 test3
Linux Linux Kernel	Version 2.6.0 test4
Linux Linux Kernel	Version 2.6.0 test5
Linux Linux Kernel	Version 2.6.0 test6
Linux Linux Kernel	Version 2.6.0 test7
Linux Linux Kernel	Version 2.6.0 test8
Linux Linux Kernel	Version 2.6.0 test9
Linux Linux Kernel	Version 2.6.10
Linux Linux Kernel	Version 2.6.10 rc1
Linux Linux Kernel	Version 2.6.10 rc2
Linux Linux Kernel	Version 2.6.10 rc3
Linux Linux Kernel	Version 2.6.11.10
Linux Linux Kernel	Version 2.6.11.11
Linux Linux Kernel	Version 2.6.11.12
Linux Linux Kernel	Version 2.6.11.1
Linux Linux Kernel	Version 2.6.11.2
Linux Linux Kernel	Version 2.6.11.3
Linux Linux Kernel	Version 2.6.11.4
Linux Linux Kernel	Version 2.6.11.5
Linux Linux Kernel	Version 2.6.11.6
Linux Linux Kernel	Version 2.6.11.7
Linux Linux Kernel	Version 2.6.11.8
Linux Linux Kernel	Version 2.6.11.9
Linux Linux Kernel	Version 2.6.11
Linux Linux Kernel	Version 2.6.11 rc1
Linux Linux Kernel	Version 2.6.11 rc2
Linux Linux Kernel	Version 2.6.11 rc3
Linux Linux Kernel	Version 2.6.11 rc4
Linux Linux Kernel	Version 2.6.11 rc5
Linux Linux Kernel	Version 2.6.12.1
Linux Linux Kernel	Version 2.6.12.2
Linux Linux Kernel	Version 2.6.12.3
Linux Linux Kernel	Version 2.6.12.4
Linux Linux Kernel	Version 2.6.12.5
Linux Linux Kernel	Version 2.6.12.6
Linux Linux Kernel	Version 2.6.12 rc1
Linux Linux Kernel	Version 2.6.12 rc2
Linux Linux Kernel	Version 2.6.12 rc3
Linux Linux Kernel	Version 2.6.12 rc4
Linux Linux Kernel	Version 2.6.12 rc5
Linux Linux Kernel	Version 2.6.12 rc6
Linux Linux Kernel	Version 2.6.13.1
Linux Linux Kernel	Version 2.6.13.2
Linux Linux Kernel	Version 2.6.13.3
Linux Linux Kernel	Version 2.6.13.4
Linux Linux Kernel	Version 2.6.13
Linux Linux Kernel	Version 2.6.13 rc1
Linux Linux Kernel	Version 2.6.13 rc2
Linux Linux Kernel	Version 2.6.13 rc3
Linux Linux Kernel	Version 2.6.13 rc4
Linux Linux Kernel	Version 2.6.13 rc5
Linux Linux Kernel	Version 2.6.13 rc6
Linux Linux Kernel	Version 2.6.13 rc7
Linux Linux Kernel	Version 2.6.14.1
Linux Linux Kernel	Version 2.6.14.2
Linux Linux Kernel	Version 2.6.14.3
Linux Linux Kernel	Version 2.6.14.4
Linux Linux Kernel	Version 2.6.14.5
Linux Linux Kernel	Version 2.6.14.6
Linux Linux Kernel	Version 2.6.14.7
Linux Linux Kernel	Version 2.6.14
Linux Linux Kernel	Version 2.6.14 rc1
Linux Linux Kernel	Version 2.6.14 rc2
Linux Linux Kernel	Version 2.6.14 rc3
Linux Linux Kernel	Version 2.6.14 rc4
Linux Linux Kernel	Version 2.6.14 rc5
Linux Linux Kernel	Version 2.6.15.1
Linux Linux Kernel	Version 2.6.15.2
Linux Linux Kernel	Version 2.6.15.3
Linux Linux Kernel	Version 2.6.15.4
Linux Linux Kernel	Version 2.6.15.5
Linux Linux Kernel	Version 2.6.15.6
Linux Linux Kernel	Version 2.6.15.7
Linux Linux Kernel	Version 2.6.15
Linux Linux Kernel	Version 2.6.15 rc1
Linux Linux Kernel	Version 2.6.15 rc3
Linux Linux Kernel	Version 2.6.15 rc4
Linux Linux Kernel	Version 2.6.15 rc5
Linux Linux Kernel	Version 2.6.15 rc6
Linux Linux Kernel	Version 2.6.15 rc7
Linux Linux Kernel	Version 2.6.16.1
Linux Linux Kernel	Version 2.6.16.2
Linux Linux Kernel	Version 2.6.16.3
Linux Linux Kernel	Version 2.6.16.4
Linux Linux Kernel	Version 2.6.16
Linux Linux Kernel	Version 2.6.16 rc1
Linux Linux Kernel	Version 2.6.16 rc2
Linux Linux Kernel	Version 2.6.16 rc3
Linux Linux Kernel	Version 2.6.16 rc4
Linux Linux Kernel	Version 2.6.16 rc5
Linux Linux Kernel	Version 2.6.16 rc6
Linux Linux Kernel	Version 2.6.16_rc7
Linux Linux Kernel	Version 2.6.1
Linux Linux Kernel	Version 2.6.1 rc1
Linux Linux Kernel	Version 2.6.1 rc2
Linux Linux Kernel	Version 2.6.1 rc3
Linux Linux Kernel	Version 2.6.2
Linux Linux Kernel	Version 2.6.2 rc1
Linux Linux Kernel	Version 2.6.2 rc2
Linux Linux Kernel	Version 2.6.2 rc3
Linux Linux Kernel	Version 2.6.3
Linux Linux Kernel	Version 2.6.3 rc1
Linux Linux Kernel	Version 2.6.3 rc2
Linux Linux Kernel	Version 2.6.3 rc3
Linux Linux Kernel	Version 2.6.3 rc4
Linux Linux Kernel	Version 2.6.4
Linux Linux Kernel	Version 2.6.4 rc1
Linux Linux Kernel	Version 2.6.4 rc2
Linux Linux Kernel	Version 2.6.4 rc3
Linux Linux Kernel	Version 2.6.5
Linux Linux Kernel	Version 2.6.5 rc1
Linux Linux Kernel	Version 2.6.5 rc2
Linux Linux Kernel	Version 2.6.5 rc3
Linux Linux Kernel	Version 2.6.6
Linux Linux Kernel	Version 2.6.6 rc1
Linux Linux Kernel	Version 2.6.6 rc2
Linux Linux Kernel	Version 2.6.6 rc3
Linux Linux Kernel	Version 2.6.7
Linux Linux Kernel	Version 2.6.7 rc1
Linux Linux Kernel	Version 2.6.7 rc2
Linux Linux Kernel	Version 2.6.7 rc3
Linux Linux Kernel	Version 2.6.8
Linux Linux Kernel	Version 2.6.8 rc1
Linux Linux Kernel	Version 2.6.8 rc2
Linux Linux Kernel	Version 2.6.8 rc3
Linux Linux Kernel	Version 2.6.8 rc4
Linux Linux Kernel	Version 2.6.9
Linux Linux Kernel	Version 2.6.9 2.6.20
Linux Linux Kernel	Version 2.6.9 rc1
Linux Linux Kernel	Version 2.6.9 rc2
Linux Linux Kernel	Version 2.6.9 rc3
Linux Linux Kernel	Version 2.6.9 rc4
Linux Linux Kernel	Version 2.6_test9_cvs

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (64)

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.5

Source: secalert@redhat.com

http://lwn.net/Alerts/180820/

Source: secalert@redhat.com

http://secunia.com/advisories/19639

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19735

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20157

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20237

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20398

Source: secalert@redhat.com

http://secunia.com/advisories/20716

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20914

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21136

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21179

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21498

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21745

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21983

Source: secalert@redhat.com

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1103

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:086

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:150

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006-05-31.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_42_kernel.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_47_kernel.html

Source: secalert@redhat.com

http://www.osvdb.org/24639

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0437.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0493.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17541

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-302-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/1390

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/1475

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/2554

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/25869

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9732

Source: secalert@redhat.com

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.5