CVE-2006-2451: Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege Escalation

What happened

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.

Affected versions

n/a: n/a Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

Review the original advisory and validate affected versions.
Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference

Exploit-DB 2031Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege EscalationMarco Ivaldi2006-07-18Verified Exploit-DB 2004Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (1)dreyer & RoMaNSoFt2006-07-11Verified Exploit-DB 2005Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (2)Julien Tinnes2006-07-12Verified Exploit-DB 2006Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)Marco Ivaldi2006-07-13Verified Exploit-DB 2011Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (4)Sunay2006-07-14Verified Sploitus0b01111002026-09-07T09:01:11Verified 0b0111100/20060b01111002026-09-07T09:01:11Verified

Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege Escalation