CVE-2006-6058
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local...
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overflow or signedness error.
Exploit likelihood
What each source reports
NVD Score used
4.0
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overflow or signedness error.
- Record
CVE-2006-6058- CVSS 2.0
- 4.0 Medium
AV:L/AC:H/Au:N/C:N/I:N/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overflow or signedness error.
- Record
CVE-2006-6058- Updated
- 2026-11-02
EUVDEUVD-2006-6041 No score
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overflow or signedness error.
- Record
EUVD-2006-6041- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5prp-v8rr-x7c9 No score
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local...
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overflow or signedness error.
- Record
GHSA-5prp-v8rr-x7c9- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:4.0 From an advisory covering 5 CVEs |
before 2.6.18.dfsg.1-13etch6, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1 Show 4 moreShow less2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch5 |
2.6.18.dfsg.1-13etch6 |
fai-kernelsDebian:4.0 From an advisory covering 5 CVEs |
before 1.17+etch.13etch6, plus listed versions 1.171.17+etch.13etch31.17+etch.13etch41.17+etch.13etch51.17+etch1 Show 5 moreShow less1.17+etch21.17+etch31.17+etch41.17+etch51.17etch1 |
1.17+etch.13etch6 |
user-mode-linuxDebian:4.0 From an advisory covering 5 CVEs |
before 2.6.18-1um-2etch.13etch6, plus listed versions 2.6.18-1um-22.6.18-1um-2etch.13etch32.6.18-1um-2etch.13etch42.6.18-1um-2etch.13etch52.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4 |
2.6.18-1um-2etch.13etch6 |
kernel-image-2.6.8-s390Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-6sarge1, plus listed versions 2.6.8-52.6.8-5sarge12.6.8-5sarge22.6.8-5sarge32.6.8-5sarge4 Show 4 moreShow less2.6.8-5sarge52.6.8-5sarge62.6.8-5sarge72.6.8-6 |
2.6.8-6sarge1 |
kernel-image-2.6.8-ia64Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-15sarge1, plus listed versions 2.6.8-142.6.8-14sarge12.6.8-14sarge22.6.8-14sarge32.6.8-14sarge4 Show 4 moreShow less2.6.8-14sarge52.6.8-14sarge62.6.8-14sarge72.6.8-15 |
2.6.8-15sarge1 |
fai-kernelsDebian:3.1 From an advisory covering 20 CVEs |
before 1.9.1sarge8, plus listed versions 1.9.11.9.1sarge11.9.1sarge21.9.1sarge31.9.1sarge4 Show 4 moreShow less1.9.1sarge51.9.1sarge61.9.1sarge71.9.1sarge7.1 |
1.9.1sarge8 |
kernel-image-2.6.8-amd64Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-17sarge1, plus listed versions 2.6.8-142.6.8-16sarge12.6.8-16sarge22.6.8-16sarge42.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 |
2.6.8-17sarge1 |
kernel-image-2.6.8-hppaDebian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-7sarge1, plus listed versions 2.6.8-62.6.8-6sarge12.6.8-6sarge22.6.8-6sarge32.6.8-6sarge4 Show 4 moreShow less2.6.8-6sarge52.6.8-6sarge62.6.8-6sarge72.6.8-7 |
2.6.8-7sarge1 |
kernel-image-2.6.8-sparcDebian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-152.6.8-15sarge12.6.8-15sarge22.6.8-15sarge32.6.8-15sarge4 Show 4 moreShow less2.6.8-15sarge52.6.8-15sarge62.6.8-15sarge72.6.8-16 |
2.6.8-16sarge1 |
kernel-image-2.6.8-alphaDebian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 |
2.6.8-17sarge1 |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-image-2.6.8-i386Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 |
2.6.8-17sarge1 |
kernel-source-2.6.8Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 |
2.6.8-17sarge1 |
kernel-patch-powerpc-2.6.8Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-13sarge1, plus listed versions 2.6.8-122.6.8-12sarge12.6.8-12sarge22.6.8-12sarge32.6.8-12sarge4 Show 4 moreShow less2.6.8-12sarge52.6.8-12sarge62.6.8-12sarge72.6.8-13 |
2.6.8-13sarge1 |
kernel-image-2.6.8-m68kDebian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-5sarge1, plus listed versions 2.6.8-42.6.8-4sarge12.6.8-4sarge22.6.8-4sarge32.6.8-4sarge4 Show 4 moreShow less2.6.8-4sarge52.6.8-4sarge62.6.8-4sarge72.6.8-5 |
2.6.8-5sarge1 |
kernelRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-BOOTRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-debugRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-docRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-enterpriseRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-headersRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-smpRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-sourceRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-summitRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernelRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-BOOTRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-debugRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-docRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-headersRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-smpRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-sourceRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernelRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-BOOTRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-debugRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-docRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-enterpriseRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-headersRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-smpRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
kernel-sourceRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:2.4.9-e.72 | 0:2.4.9-e.72 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6058 is a medium vulnerability (CVSS 4.0) in Linux Kernel, published November 22, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 43rd percentile. No source names a fixed version.
References
projects.info-pull.com/mokb/MOKB-17-11-2006.html
issues.rpath.com/browse/RPL-1929
debian.org/security/2007/dsa-1436
secunia.com/advisories/27703
secunia.com/advisories/28141
secunia.com/advisories/28706
Show 49 moreShow less
secunia.com/advisories/27528
secunia.com/advisories/26379
mandriva.com/security/advisories?name=MDKSA-2007:226
mandriva.com/security/advisories?name=MDVSA-2008:112
debian.org/security/2008/dsa-1504
mandriva.com/security/advisories?name=MDVSA-2008:008
novell.com/linux/security/advisories/2007_59_kernel.html
secunia.com/advisories/28654
secunia.com/advisories/23034
redhat.com/support/errata/RHSA-2007-0672.html
vupen.com/english/advisories/2006/4613
ubuntu.com/usn/usn-558-1
ubuntu.com/usn/usn-574-1
secunia.com/advisories/29058
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24
secunia.com/advisories/28971
secunia.com/advisories/28170
mandriva.com/security/advisories?name=MDKSA-2007:232
secunia.com/advisories/27614
ubuntu.com/usn/usn-578-1
support.avaya.com/elmodocs2/security/ASA-2007-404.htm
nvd.nist.gov/vuln/detail/CVE-2006-6058
github.com/advisories/GHSA-5prp-v8rr-x7c9
access.redhat.com/errata/RHSA-2007:0672
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=217007
bugzilla.redhat.com/show_bug.cgi?id=217023
bugzilla.redhat.com/show_bug.cgi?id=231070
bugzilla.redhat.com/show_bug.cgi?id=233483
bugzilla.redhat.com/show_bug.cgi?id=234295
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0672.json
access.redhat.com/security/cve/CVE-2006-6054
bugzilla.redhat.com/show_bug.cgi?id=1618234
cve.org/CVERecord?id=CVE-2006-6054
nvd.nist.gov/vuln/detail/CVE-2006-6054
access.redhat.com/security/cve/CVE-2006-6058
cve.org/CVERecord?id=CVE-2006-6058
access.redhat.com/security/cve/CVE-2007-1217
bugzilla.redhat.com/show_bug.cgi?id=402741
cve.org/CVERecord?id=CVE-2007-1217
nvd.nist.gov/vuln/detail/CVE-2007-1217
access.redhat.com/security/cve/CVE-2007-1353
bugzilla.redhat.com/show_bug.cgi?id=243259
cve.org/CVERecord?id=CVE-2007-1353
nvd.nist.gov/vuln/detail/CVE-2007-1353
access.redhat.com/security/cve/CVE-2007-1592
bugzilla.redhat.com/show_bug.cgi?id=243258
cve.org/CVERecord?id=CVE-2007-1592
nvd.nist.gov/vuln/detail/CVE-2007-1592