CVE catalog

CVE-2006-5753

linux-2.6 - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 25, 2026

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges via unknown vectors. kernel listxattr syscall can corrupt user space programs Red Hat Enterprise Linux 2.1 is not vulnerable to this issue as it only affects x86_64 architectures. Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch at release. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankernel-source-2.4.273.12.4.27-10vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge1vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge2vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge3vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge4vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge5vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge6vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge7fixed
Debianlinux-2.64.02.6.18.dfsg.1-12vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-12etch1vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-12etch2vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankernel-source-2.4.27deb3.12.4.27-10sarge7Not reportedDSA-1503-2Not reported
Debianlinux-2.6deb4.02.6.18.dfsg.1-13etch1Not reportedDSA-1356-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References