CVE-2006-5158: High severity linux linux kernel vulnerability
Published Oct 4, 2006
·Updated
The nlmclntmarkreclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified vectors that trigger a kernel oops (null dereference) and a deadlock.
Affected Software
61 affected components
Linux Linux kernel=2.6.11
Linux Linux kernel=2.6.11.2
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.15.3
Linux Linux kernel=2.6.11.10
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.14.7
Linux Linux kernel=2.6.13
Linux Linux kernel=2.6.13.3
Linux Linux kernel=2.6.11.8
Linux Linux kernel=2.6.14.4
Linux Linux kernel=2.6.14
Linux Linux kernel=2.6.10
Linux Linux kernel=2.6.14.3
Linux Linux kernel=2.6.11.6
Linux Linux kernel=2.6.11.11
Linux Linux kernel=2.6.3
Linux Linux kernel<=2.6.15.7
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6.15.6
Linux Linux kernel=2.6.15.1
Linux Linux kernel=2.6.11.5
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.14.5
Linux Linux kernel=2.6.13.2
Linux Linux kernel=2.6.13.5
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.14.1
Linux Linux kernel=2.6.12.5
Linux Linux kernel=2.6.14.6
Linux Linux kernel=2.6.12.1
Linux Linux kernel=2.6.11.9
Linux Linux kernel=2.6.13.4
Linux Linux kernel=2.6.12.2
Linux Linux kernel=2.6.15.2
Linux Linux kernel=2.6.12.4
Linux Linux kernel=2.6.11.3
Linux Linux kernel=2.6.12.3
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.15.4
Linux Linux kernel=2.6.12.6
Linux Linux kernel=2.6.11.7
Linux Linux kernel=2.6.15
Linux Linux kernel=2.6.14.2
Linux Linux kernel=2.6.8.1
Linux Linux kernel=2.6.11.4
Linux Linux kernel=2.6.11.12
Linux Linux kernel=2.6.15.5
Linux Linux kernel=2.6.11.1
Linux Linux kernel=2.6.9
Linux Linux kernel=2.6.13.1
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.12
Linux Linux kernel<2.6.16
redhat Enterprise Linux Desktop=4.0
redhat Enterprise Linux Eus=4.5
redhat Enterprise Linux Server=4.0
redhat Enterprise Linux Workstation=4.0
Canonical Ubuntu Linux=5.10
Canonical Ubuntu Linux=6.06
Canonical Ubuntu Linux=6.10
Remediation
Patch Available
Event History
Oct 4, 2006
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Oct 5, 2006
Data Sourced
via NVD·04:04 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5158?
CVE-2006-5158 is classified as a denial of service vulnerability that can lead to process crashes in the Linux kernel.
2
How do I fix CVE-2006-5158?
To fix CVE-2006-5158, it is recommended to upgrade the Linux kernel to version 2.6.16 or later.
3
What versions of the Linux kernel are affected by CVE-2006-5158?
CVE-2006-5158 affects Linux kernel versions up to 2.6.15.7 inclusive.
4
What type of vulnerability is CVE-2006-5158?
CVE-2006-5158 is a denial of service vulnerability that can trigger kernel oops and deadlock.
5
Can CVE-2006-5158 be exploited remotely?
Yes, CVE-2006-5158 can be exploited by remote attackers targeting NFS lockd in the Linux kernel.