Every CVE Search/ Get API key

CVE-2006-0039

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local...

4.7 Medium

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.

Exploit likelihood

0.30%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.7

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.

Record
CVE-2006-0039
CVSS 2.0
4.7 MediumAV:L/AC:H/Au:N/C:P/I:N/A:C
Weakness
CWE-362
Updated
2026-11-02
CVE List No score

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.

Record
CVE-2006-0039
Updated
2026-11-02
EUVDEUVD-2006-0047 No score

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.

Record
EUVD-2006-0047
Updated
2026-11-03
GitHub AdvisoriesGHSA-25rg-6fcp-95mq No score

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local...

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.

Record
GHSA-25rg-6fcp-95mq
Weakness
CWE-362
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-source-2.4.27
Debian:3.1
From an advisory covering 16 CVEs
 before 2.4.27-10sarge3, plus listed versions
2.4.27-102.4.27-10sarge12.4.27-10sarge2
2.4.27-10sarge3
kernel-source-2.6.8
Debian:3.1
From an advisory covering 24 CVEs
 before 2.6.8-16sarge3, plus listed versions
2.6.8-162.6.8-16sarge12.6.8-16sarge2
2.6.8-16sarge3
kernel
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-doc
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-largesmp
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
Show 32 moreShow less
Affected packages
PackageAffectedFixed
kernel-smp
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-doc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-largesmp
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-smp
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-doc
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-largesmp
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-smp
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-doc
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-largesmp
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-smp
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 8 CVEs
 before 0:2.6.9-42.0.3.EL
0:2.6.9-42.0.3.EL

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-0039 is a medium vulnerability (CVSS 4.7) in Linux Kernel, published May 19, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. No source names a fixed version.

References

Show 63 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open