● CVE
CVE-2007-6206
Vendordebian, suse, linux, canonical, redhatProductdebian linux, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, linux kernel, ubuntu linux, enterprise linux eus, enterprise linux server, enterprise linux desktop, linux enterprise real time extension, enterprise linux workstation, opensuseDiscoveredDec 4, 2007UpdatedApr 23, 2026
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.