CVE-2006-3741

The perfmonctl system call (sys_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium systems, does not properly track the reference count for file descriptors, which allows local users to cause a denial of service (file descriptor consumption).

• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204360Patch
• http://secunia.com/advisories/22279Vendor Advisory
• http://secunia.com/advisories/22292Vendor Advisory
• http://secunia.com/advisories/22382Vendor Advisory
• http://secunia.com/advisories/22945
• http://secunia.com/advisories/23370
• http://secunia.com/advisories/23474
• http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm
• http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b8444d00762703e1b6146fce12ce2684885f8bf6
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:182
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:025
• http://www.novell.com/linux/security/advisories/2006_79_kernel.html
• http://www.redhat.com/support/errata/RHSA-2006-0689.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/20361
• http://www.us.debian.org/security/2006/dsa-1233
• http://www.vupen.com/english/advisories/2006/3937
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29384
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11250
• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204360Patch
• http://secunia.com/advisories/22279Vendor Advisory
• http://secunia.com/advisories/22292Vendor Advisory
• http://secunia.com/advisories/22382Vendor Advisory
• http://secunia.com/advisories/22945
• http://secunia.com/advisories/23370
• http://secunia.com/advisories/23474
• http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm
• http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b8444d00762703e1b6146fce12ce2684885f8bf6
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:182
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:025
• http://www.novell.com/linux/security/advisories/2006_79_kernel.html
• http://www.redhat.com/support/errata/RHSA-2006-0689.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/20361
• http://www.us.debian.org/security/2006/dsa-1233
• http://www.vupen.com/english/advisories/2006/3937
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29384
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11250

Published

Oct 10, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3735Multiple PHP remote file inclusion vulnerabilities in Mail2F…
• CVE-2006-3736PHP remote file inclusion vulnerability in core/videodb.clas…
• CVE-2006-3737Cross-site scripting (XSS) vulnerability in filemanager/file…
• CVE-2006-3738Buffer overflow in the SSL_get_shared_ciphers function in Op…
• CVE-2006-3739Integer overflow in the CIDAFM function in X.Org 6.8.2 and X…
• CVE-2006-3740Integer overflow in the scan_cidfont function in X.Org 6.8.2…
• CVE-2006-3742The KDE PAM configuration shipped with Fedora Core 5 causes …
• CVE-2006-3743Multiple buffer overflows in ImageMagick before 6.2.9 allow …
• CVE-2006-3744Multiple integer overflows in ImageMagick before 6.2.9 allow…
• CVE-2006-3745Unspecified vulnerability in the sctp_make_abort_user functi…
• CVE-2006-3746Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allow…
• CVE-2006-3747Off-by-one error in the ldap scheme handling in the Rewrite …