CVE-2006-6060
The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows...
CVE-2006-6060 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published November 22, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. No source names a fixed version.
- Severity
- 4.9 MediumCVSS 2.0, NVD
- Exploit chance
- 0.46%EPSS, 40th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a malformed NTFS file stream that triggers an infinite loop in the __find_get_block_slow function.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.6.8Debian:3.1 From an advisory covering 14 CVEs | before 2.6.8-16sarge7, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge42.6.8-16sarge52.6.8-16sarge6 | 2.6.8-16sarge7 |
What each source reports
NVD Score used
The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a malformed NTFS file stream that triggers an infinite loop in the __find_get_block_slow function.
- Record
CVE-2006-6060- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE ListNo score
The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a malformed NTFS file stream that triggers an infinite loop in the __find_get_block_slow function.
- Record
CVE-2006-6060- Updated
- 2026-11-02
EUVDEUVD-2006-6043No score
The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a malformed NTFS file stream that triggers an infinite loop in the __find_get_block_slow function.
- Record
EUVD-2006-6043- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-56gh-gxh2-4p7mNo score
The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows...
The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a malformed NTFS file stream that triggers an infinite loop in the __find_get_block_slow function.
- Record
GHSA-56gh-gxh2-4p7m- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.