CVE-2006-6304: Linux Kernel

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump.

Affected products

• Linux Linux Kernel: version 2.6.19 only

Published 2006-12-14. Last modified 2026-06-16.