Every CVE Search/ Get API key

CVE-2006-1522

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and...

4.9 Medium

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.

Exploit likelihood

0.45%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.9

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.

Record
CVE-2006-1522
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.

Record
CVE-2006-1522
Updated
2026-11-02
EUVDEUVD-2006-1526 No score

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.

Record
EUVD-2006-1526
Updated
2026-11-03
GitHub AdvisoriesGHSA-58jc-qqg8-qv38 No score

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and...

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.

Record
GHSA-58jc-qqg8-qv38
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-doc
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-hugemem
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-largesmp
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-smp
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
Show 30 moreShow less
Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-doc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-hugemem
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-largesmp
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-smp
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-doc
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-hugemem
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-largesmp
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-smp
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-doc
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-hugemem
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-largesmp
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-smp
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
 before 0:2.6.9-34.0.1.EL
0:2.6.9-34.0.1.EL

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-1522 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published April 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. No source names a fixed version.

References

Show 102 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open