CVE-2006-6106: Linux Kernel

High severity, CVSS 7.5. EPSS: 5.8% chance of exploitation in the next 30 days.

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.

Affected products

• Linux Linux Kernel: version 2.4.22 only; version 2.4.23 only; version 2.4.24 only; version 2.4.25 only; version 2.4.26 only; version 2.4.27 only; …

Published 2006-12-19. Last modified 2026-06-16.