VULNERABILITY INTELLIGENCE

CVE-2006-2935

CVSS score4.6 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2006-07-05
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.

Weakness classification

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references