CVE-2006-1056
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and...
2.1 Low
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
Exploit likelihood
0.46%Down 1.1 points since Feb 4, 2022
What each source reports
NVD Score used
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
- Record
CVE-2006-1056- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
- Record
CVE-2006-1056- Updated
- 2026-11-02
EUVDEUVD-2006-1060 No score
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
- Record
EUVD-2006-1060- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g998-qjcg-g7jh No score
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and...
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
- Record
GHSA-g998-qjcg-g7jh- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.27Debian:3.1 From an advisory covering 16 CVEs |
before 2.4.27-10sarge3, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge2 |
2.4.27-10sarge3 |
kernel-source-2.6.8Debian:3.1 From an advisory covering 24 CVEs |
before 2.6.8-16sarge3, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge2 |
2.6.8-16sarge3 |
kernelRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-docRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-hugememRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-smpRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-sourceRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernelRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-docRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernelRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-docRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-hugememRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-smpRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-sourceRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernelRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-docRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-smpRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs |
before 0:2.4.21-47.EL | 0:2.4.21-47.EL |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs |
before 0:2.6.9-42.EL | 0:2.6.9-42.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1056 is a low vulnerability (CVSS 2.1) in Freebsd, published April 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9995
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911
redhat.com/support/errata/RHSA-2006-0437.html
secunia.com/advisories/22876
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9
Show 194 moreShow less
vupen.com/english/advisories/2006/4502
lwn.net/Alerts/180820
ubuntu.com/usn/usn-302-1
kb.vmware.com/kb/2533126
osvdb.org/24746
vmware.com/download/esx/esx-213-200610-patch.html
debian.org/security/2006/dsa-1097
novell.com/linux/security/advisories/2006-05-31.html
securityfocus.com/archive/1/451421/100/0/threaded
securitytracker.com/id?1015966
support.avaya.com/elmodocs2/security/ASA-2006-180.htm
lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
marc.info?l=linux-kernel&m=114548768214478&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/25871
security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt
nvd.nist.gov/vuln/detail/CVE-2006-1056
github.com/advisories/GHSA-g998-qjcg-g7jh
access.redhat.com/errata/RHSA-2006:0437
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0437.json
cve.org/CVERecord?id=CVE-2005-3055
This page doesn't list everything
Left out here: 132 references. The JSON record has them.