CVE-2006-2451

CVE-2006-2451 describes a vulnerability in the Linux kernel versions 2.6.13 through 2.6.17.3 and 2.6.16 through 2.6.16.23, related to the suid_dumpable support. A local user can exploit this flaw by using the PR_SET_DUMPABLE argument of the prctl function to trigger a core dump in a restricted directory, leading to denial of service through disk consumption and potentially local privilege escalation. The vulnerability has a CVSS score of 4.6, indicating a low attack complexity and requiring local access, with potential impacts on confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, multiple exploit proofs-of-concept are available on ExploitDB, suggesting the potential for exploitation, though there is no evidence of active exploitation or significant community discussion.