CVE-2006-4997
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote...
7.5 HighFix available
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
4.87%Up 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).
- Record
CVE-2006-4997- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).
- Record
CVE-2006-4997- Updated
- 2026-11-02
EUVDEUVD-2006-4983 No score
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).
- Record
EUVD-2006-4983- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-684x-5684-48r7
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote...
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).
- Record
GHSA-684x-5684-48r7- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVBELL-CVE-2006-4997
CVE-2006-4997 does not affect BellSoft software
- Record
BELL-CVE-2006-4997- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.6.8Debian:3.1 |
before 2.6.8-16sarge6, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge42.6.8-16sarge5 |
2.6.8-16sarge6 |
kernel-source-2.4.27Debian:3.1 |
before 2.4.27-10sarge5, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge4 |
2.4.27-10sarge5 |
kernelRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-docRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-hugememRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
Show 104 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-smpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernelRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-docRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernelRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-docRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-hugememRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-smpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernelRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-docRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-smpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.3.EL | 0:2.6.9-42.0.3.EL |
kernelRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernelRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernelRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernelRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernelRed Hat:enterprise_linux:2.1::as |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-docRed Hat:enterprise_linux:2.1::as |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-smpRed Hat:enterprise_linux:2.1::as |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-sourceRed Hat:enterprise_linux:2.1::as |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernelRed Hat:enterprise_linux:2.1::aw |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-docRed Hat:enterprise_linux:2.1::aw |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-smpRed Hat:enterprise_linux:2.1::aw |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-sourceRed Hat:enterprise_linux:2.1::aw |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernelRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-BOOTRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-debugRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-docRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-enterpriseRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-headersRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-smpRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-sourceRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-summitRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernelRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-BOOTRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-debugRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-docRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-headersRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-smpRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-sourceRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernelRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-BOOTRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-debugRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-docRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-enterpriseRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-headersRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-smpRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-sourceRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4997 is a high vulnerability (CVSS 7.5) in Linux Kernel, published October 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.87%, the 92nd percentile. Fixed in kernel-source-2.6.8 2.6.8-16sarge6.
References
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206265
securityfocus.com/bid/20363
mandriva.com/security/advisories?name=MDKSA-2007:025
novell.com/linux/security/advisories/2006_79_kernel.html
secunia.com/advisories/22253
redhat.com/support/errata/RHSA-2007-0012.html
Show 119 moreShow less
securitytracker.com/id?1017526
kernel.org/git?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe26109a9dfd9327fdbe630fc819e1b7450986b2
us.debian.org/security/2006/dsa-1237
support.avaya.com/elmodocs2/security/ASA-2006-249.htm
vupen.com/english/advisories/2006/3999
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10388
ubuntu.com/usn/usn-395-1
exchange.xforce.ibmcloud.com/vulnerabilities/29387
nvd.nist.gov/vuln/detail/CVE-2006-4997
github.com/advisories/GHSA-684x-5684-48r7
docs.bell-sw.com/security/cves/CVE-2006-4997
access.redhat.com/errata/RHSA-2006:0689
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0689.json
cve.org/CVERecord?id=CVE-2005-4811