CVE-2006-1066

Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUG_STACK stack during the do_debug function call.

• http://marc.info/?l=linux-kernel&m=113932292516359&w=2
• http://secunia.com/advisories/19374Patch, Vendor Advisory
• http://secunia.com/advisories/19955
• http://secunia.com/advisories/21614
• http://www.debian.org/security/2006/dsa-1017Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:151
• http://www.osvdb.org/24098Patch
• http://www.securityfocus.com/bid/17216Patch
• https://usn.ubuntu.com/281-1/
• http://marc.info/?l=linux-kernel&m=113932292516359&w=2
• http://secunia.com/advisories/19374Patch, Vendor Advisory
• http://secunia.com/advisories/19955
• http://secunia.com/advisories/21614
• http://www.debian.org/security/2006/dsa-1017Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:151
• http://www.osvdb.org/24098Patch
• http://www.securityfocus.com/bid/17216Patch
• https://usn.ubuntu.com/281-1/

Published

Mar 27, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1060Heap-based buffer overflow in zgv before 5.8 and xzgv before…
• CVE-2006-1061Heap-based buffer overflow in cURL and libcURL 7.15.0 throug…
• CVE-2006-1062Unspecified vulnerability in lurker.cgi for Lurker 2.0 and e…
• CVE-2006-1063Unspecified vulnerability in Lurker 2.0 and earlier allows r…
• CVE-2006-1064Multiple cross-site scripting (XSS) vulnerabilities in Lurke…
• CVE-2006-1065SQL injection vulnerability in search.php in MyBulletinBoard…
• CVE-2006-1067Linksys WRT54G routers version 5 (running VXWorks) allow rem…
• CVE-2006-1068Netgear 614 and 624 routers, possibly running VXWorks, allow…
• CVE-2006-1069Unspecified vulnerability in the session handling for Geeklo…
• CVE-2006-1070Cross-site scripting (XSS) vulnerability in dv_gbook.php in …
• CVE-2006-1071Cross-site scripting (XSS) vulnerability in index.php in DVg…
• CVE-2006-1072Cross-site scripting (XSS) vulnerability in Daverave Simplog…