CVE catalog

CVE-2006-4535

kernel-source-2.4.27 - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.45% · Oct 25, 2026

The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745. NOTE: older kernel versions for specific Linux distributions are also affected, due to backporting of the CVE-2006-3745 patch. security flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankernel-source-2.4.273.12.4.27-10vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge1vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge2vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge3vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge4fixed
Debianfai-kernels3.11.9.1vulnerable
Debianfai-kernels3.11.9.1sarge1vulnerable
Debianfai-kernels3.11.9.1sarge2vulnerable
Debianfai-kernels3.11.9.1sarge3vulnerable
Debianfai-kernels3.11.9.1sarge4fixed
Debiansystemimager3.13.2.3-6vulnerable
Debiansystemimager3.13.2.3-6sarge1vulnerable
Debiansystemimager3.13.2.3-6sarge2vulnerable
Debiansystemimager3.13.2.3-6sarge3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankernel-source-2.4.27deb3.12.4.27-10sarge4Not reportedDSA-1183-1Not reported
Debianfai-kernelsdeb3.11.9.1sarge4Not reportedDSA-1183-1Not reported
Debiansystemimagerdeb3.13.2.3-6sarge3Not reportedDSA-1183-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References