CVE-2006-0558

Description

perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by interrupting a task while another process is accessing the mm_struct, which triggers a BUG_ON action in the put_page_testzero function.

4.9

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 0.05%

Vendor Advisory debian.org Vendor Advisory redhat.com

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/19737	third party advisory
http://www.vupen.com/english/advisories/2006/2554	vdb entry
http://www.vupen.com/english/advisories/2006/1444	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10177	vdb entry signature
http://www.debian.org/security/2006/dsa-1103	vendor advisory
http://marc.info/?l=linux-ia64&m=113882384921688	mailing list
http://secunia.com/advisories/26709	third party advisory
http://www.redhat.com/support/errata/RHSA-2007-0774.html	vendor advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185082
http://www.securityfocus.com/bid/17482	vdb entry
http://secunia.com/advisories/20914	third party advisory

Frequently Asked Questions

What is the severity of CVE-2006-0558?: CVE-2006-0558 has been scored as a medium severity vulnerability.
How to fix CVE-2006-0558?: To fix CVE-2006-0558, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-0558 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2006-0558 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.