CVE-2006-2936: Linux Kernel

High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days.

The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued.

Affected products

• Linux Linux Kernel: version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.3 only; version 2.6.4 only; version 2.6.5 only; …

Published 2006-07-10. Last modified 2026-09-23.