What happened
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
Affected versions
n/a: n/a Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 2031Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege EscalationMarco Ivaldi2006-07-18VerifiedExploit-DB 2004Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (1)dreyer & RoMaNSoFt2006-07-11VerifiedExploit-DB 2005Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (2)Julien Tinnes2006-07-12VerifiedExploit-DB 2006Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)Marco Ivaldi2006-07-13VerifiedExploit-DB 2011Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (4)Sunay2006-07-14VerifiedSploitus0b01111002026-09-07T09:01:11Verified0b0111100/20060b01111002026-09-07T09:01:11VerifiedSource timeline
Discovered through Exploit-DBView source ↗
CVE record published by NVDView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.