CVE-2006-3626

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by...

6.2 MediumFix available

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

Exploit likelihood

2.22%Up 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 6.2

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

Record: CVE-2006-3626
CVSS 2.0: 6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

Record: CVE-2006-3626
Updated: 2026-11-02

EUVDEUVD-2006-3621 No score

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

Record: EUVD-2006-3621
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cqrh-j4qw-5486 No score

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by...

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

Record: GHSA-cqrh-j4qw-5486
Updated: 2026-11-02

OSVBELL-CVE-2006-3626 6.2

CVE-2006-3626 does not affect BellSoft software

Record: BELL-CVE-2006-3626
CVSS 2.0: 6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

Affected products

linux kernel

Affected packages

Affected packages
Package	Affected	Fixed
`kernel-source-2.6.8` Debian:3.1	before 2.6.8-16sarge4, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge3	2.6.8-16sarge4
`kernel` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-debuginfo` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-devel` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-doc` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-hugemem` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-hugemem-devel` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-largesmp` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-largesmp-devel` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-smp` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL

Show 31 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-smp-devel` Red Hat:enterprise_linux:4::as From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-debuginfo` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-devel` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-doc` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-hugemem` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-hugemem-devel` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-largesmp` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-largesmp-devel` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-smp` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-smp-devel` Red Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-debuginfo` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-devel` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-doc` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-hugemem` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-hugemem-devel` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-largesmp` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-largesmp-devel` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-smp` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-smp-devel` Red Hat:enterprise_linux:4::es From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-debuginfo` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-devel` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-doc` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-hugemem` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-hugemem-devel` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-largesmp` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-largesmp-devel` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-smp` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL
`kernel-smp-devel` Red Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs	before 0:2.6.9-42.0.2.EL	0:2.6.9-42.0.2.EL

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3626 is a medium vulnerability (CVSS 6.2) in Linux Kernel, published July 15, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.22%, the 82nd percentile. Fixed in kernel-source-2.6.8 2.6.8-16sarge4.

References

Show 75 moreShow less