Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-7203

13
FAUCET Score

CVE-2006-7203 describes a denial-of-service vulnerability in the Linux kernel (versions 2.6.20 and earlier). A local attacker can trigger a NULL pointer dereference and system crash (oops) by mounting a smbfs filesystem in compatibility mode. The vulnerability has a CVSS score of 4.0, indicating a low severity with local access required and high attack complexity, leading to a complete loss of availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.6.20CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.0MEDIUM

AV:L/AC:H/Au:N/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
1.9
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.48%
Probability of exploitation in next 30 days
EPSS Percentile
38.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0048 is in the 74th percentile among its peer group of 1,595 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: kernel-0:2.6.9-55.0.2.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel-0:2.6.18-8.1.6.el5
View patch

Vendor Advisories (1)

redhatCVE-2006-7203Important

oops in compat_sys_mount() when data pointer is NULL

May 15, 2007

References

git.kernel.org
rhn.redhat.com / errata/RHSA-2007-0488.html
secunia.com / advisories/25682
secunia.com / advisories/25683
secunia.com / advisories/25700
secunia.com / advisories/25838
secunia.com / advisories/25961
secunia.com / advisories/26133
secunia.com / advisories/26139
secunia.com / advisories/26289
secunia.com / advisories/26620
secunia.com / advisories/29058
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10941
rhn.redhat.com / errata/RHSA-2007-0376.html
support.avaya.com / elmodocs2/security/ASA-2007-287.htm
debian.org / security/2008/dsa-1504
mandriva.com / security/advisories
mandriva.com / security/advisories
novell.com / linux/security/advisories/2007_35_kernel.html
novell.com / linux/security/advisories/2007_43_kernel.html
ubuntu.com / usn/usn-486-1
ubuntu.com / usn/usn-489-1
vupen.com / english/advisories/2007/2209