What is CVE-2007-6206?

CVE-2007-6206 is a Low severity Linux kernel vulnerability with a CVSS score of 2.1 out of 10, classified as a Information Exposure flaw (CWE-200). CVE-2007-6206 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2007-6206?

CVE-2007-6206 has a CVSS score of 2.1 out of 10, rated Low severity. The vector string is AV:L/AC:L/Au:N/C:P/I:N/A:N.

Is there a patch available for CVE-2007-6206?

No patch is currently available for CVE-2007-6206. Monitor the NIST NVD and your Linux distribution's security advisories for updates.

Is CVE-2007-6206 actively exploited?

CVE-2007-6206 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Information Exposure (CWE-200)?

The product exposes sensitive information to an actor not authorised to see it. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/200.html

CVE-2007-6206

Low

The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.

Package Linux Kernel

Published 2007-12-04

Last modified 2026-04-23

CVSS version 2.0

Patch available

Awaiting data

CVSS 2.0 score

2.1

out of 10

Low

Attack Vector

Local

Attack Complexity

Low

Privileges Required

User Interaction

Scope

Confidentiality

Low

Integrity

None

Availability

None

Vector string

AV:L/AC:L/Au:N/C:P/I:N/A:N

Weakness type

CWE-200

CVE-2007-6206 is a Information Exposure vulnerability

What is Information Exposure?

The product exposes sensitive information to an actor not authorised to see it. Learn more on MITRE CWE

References

The following references provide additional information about CVE-2007-6206 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel.org
http://bugzilla.kernel.org/show_bug.cgi?id=3043

Issue Tracking Vendor Advisory
Lists
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html

Mailing List Third Party Advisory
Lists
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html

Mailing List Third Party Advisory
Lists
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html

Mailing List Third Party Advisory
Lists
http://lists.vmware.com/pipermail/security-announce/2008/000023.html

Mailing List Third Party Advisory
Red Hat
http://rhn.redhat.com/errata/RHSA-2008-0055.html

Third Party Advisory
Secunia
http://secunia.com/advisories/27908

Third Party Advisory
Secunia
http://secunia.com/advisories/28141

Third Party Advisory
Secunia
http://secunia.com/advisories/28643

Third Party Advisory
Secunia
http://secunia.com/advisories/28706

Third Party Advisory
Secunia
http://secunia.com/advisories/28748

Third Party Advisory
Secunia
http://secunia.com/advisories/28826

Third Party Advisory
Secunia
http://secunia.com/advisories/28889

Third Party Advisory
Secunia
http://secunia.com/advisories/28971

Third Party Advisory
Secunia
http://secunia.com/advisories/29058

Third Party Advisory
Secunia
http://secunia.com/advisories/30110

Third Party Advisory
Secunia
http://secunia.com/advisories/30818

Third Party Advisory
Secunia
http://secunia.com/advisories/30962

Third Party Advisory
Secunia
http://secunia.com/advisories/31246

Third Party Advisory
Secunia
http://secunia.com/advisories/33280

Third Party Advisory
Wiki
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048

Broken Link
Debian Security
http://www.debian.org/security/2007/dsa-1436

Third Party Advisory
Debian Security
http://www.debian.org/security/2008/dsa-1503

Third Party Advisory
Debian Security
http://www.debian.org/security/2008/dsa-1504

Third Party Advisory
Mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:044

Third Party Advisory
Mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:086

Third Party Advisory
Mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:112

Third Party Advisory
Red Hat
http://www.redhat.com/support/errata/RHSA-2008-0089.html

Third Party Advisory
Red Hat
http://www.redhat.com/support/errata/RHSA-2008-0211.html

Third Party Advisory
Red Hat
http://www.redhat.com/support/errata/RHSA-2008-0787.html

Third Party Advisory
Securityfocus
http://www.securityfocus.com/archive/1/487808/100/0/threaded

Third Party Advisory VDB Entry
Securityfocus
http://www.securityfocus.com/bid/26701

Third Party Advisory VDB Entry
Ubuntu Security
http://www.ubuntu.com/usn/usn-574-1

Third Party Advisory
Ubuntu Security
http://www.ubuntu.com/usn/usn-578-1

Third Party Advisory
Vupen
http://www.vupen.com/english/advisories/2007/4090

Third Party Advisory
Vupen
http://www.vupen.com/english/advisories/2008/2222/references

Third Party Advisory
Exchange
https://exchange.xforce.ibmcloud.com/vulnerabilities/38841

Third Party Advisory VDB Entry
Oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10719

Third Party Advisory
Kernel patch commit
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af
Patch

Details

CVE ID CVE-2007-6206

Severity Low

CVSS score 2.1 / 10

CVSS version 2.0

Published 2007-12-04

Modified 2026-04-23

KEV No

Patch Awaiting data

Package linux

Frequently asked questions

What is CVE-2007-6206?

CVE-2007-6206 is a Low severity Linux kernel vulnerability with a CVSS score of 2.1 out of 10 , classified as an Information Exposure flaw (CWE-200) . CVE-2007-6206 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2007-6206?

CVE-2007-6206 has a CVSS score of 2.1 out of 10, rated Low severity (CVSS 2.0). The vector string is AV:L/AC:L/Au:N/C:P/I:N/A:N.
Is there a patch available for CVE-2007-6206?

No patch is currently available for CVE-2007-6206. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
Is CVE-2007-6206 actively exploited?

No — CVE-2007-6206 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
What is Information Exposure (CWE-200)?

The product exposes sensitive information to an actor not authorised to see it. View CWE-200 on MITRE CWE →