Unrated severityNVD Advisory· Published Jul 18, 2006· Updated Jun 16, 2026
CVE-2006-3626
CVE-2006-3626
Description
Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
43cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*+ 42 more
- cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*
- (no CPE)range: <=2.6.17.4
Patches
Vulnerability mechanics
References
29- kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5nvd
- lists.grok.org.uk/pipermail/full-disclosure/2006-July/047907.htmlnvd
- secunia.com/advisories/21041nvd
- secunia.com/advisories/21057nvd
- secunia.com/advisories/21073nvd
- secunia.com/advisories/21119nvd
- secunia.com/advisories/21123nvd
- secunia.com/advisories/21179nvd
- secunia.com/advisories/21498nvd
- secunia.com/advisories/21605nvd
- secunia.com/advisories/22174nvd
- support.avaya.com/elmodocs2/security/ASA-2006-203.htmnvd
- www.debian.org/security/2006/dsa-1111nvd
- www.kernel.org/git/nvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2006_17_sr.htmlnvd
- www.novell.com/linux/security/advisories/2006_42_kernel.htmlnvd
- www.novell.com/linux/security/advisories/2006_47_kernel.htmlnvd
- www.novell.com/linux/security/advisories/2006_49_kernel.htmlnvd
- www.osvdb.org/27120nvd
- www.redhat.com/support/errata/RHSA-2006-0617.htmlnvd
- www.securityfocus.com/archive/1/440300/100/0/threadednvd
- www.securityfocus.com/bid/18992nvd
- www.ubuntu.com/usn/usn-319-2nvd
- www.vupen.com/english/advisories/2006/2816nvd
- bugzilla.redhat.com/bugzilla/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27790nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10060nvd
- usn.ubuntu.com/319-1/nvd
News mentions
0No linked articles in our index yet.