madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability. NOTE: this description was originally written in a way that combined two separate issues. The mprotect issue now has a separate name, CVE-2006-2071.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-pseries64Upgrade kernel-defaultUpgrade kernel-smpUpgrade kernel-bigsmpUpgrade kernel-s390xUpgrade kernel-s390Upgrade kernel-64k-pagesizeUpgrade um-host-install-initrdUpgrade kernel-iseries64Upgrade kernel-sourceUpgrade um-host-kernelUpgrade kernel-sn2Upgrade kernel-pmac64Upgrade kernel-umUpgrade kernel-debugUpgrade kernel-syms | Feb 17, 2015 | Apr 19, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub