CVE-2006-1242

CVE-2006-1242 describes a vulnerability in the ip_push_pending_frames function of Linux kernel versions 2.4.x and 2.6.x prior to 2.6.16. This flaw allows remote attackers to perform an Idle Scan (nmap -sI) by observing incremented IP ID fields in RST packets sent after unsolicited TCP SYN-ACKs, bypassing existing protections. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and potentially leading to information disclosure. The EPSS score is low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also absent, indicating a lack of widespread attention or exploitation.