Description
The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | fai-kernels | 1.9.1sarge4 | DSA-1184-2 |
| Debian 3.1 | kernel-source-2.6.8 | 2.6.8-16sarge5 | DSA-1184-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +8 | 2.6.9-42.EL | RHSA-2006:0575 |
Advisories 2
- RHSA-2006:0575 Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4 Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1184-2 kernel-source-2.6.8 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- [git-commits-head] 20060311 [PATCH] selinux: tracer SID fix mailing-list
- http://selinuxnews.org/wp/index.php/2006/03/13/security-ptrace-bug-cve-2006-1052/
- USN-281-1 vendor-advisory
- 25232 vdb-entry
- [selinux] 20060313 [SECURITY] SELinux ptrace bug (CVE-2006-1052) mailing-list
- RHSA-2006:0575 vendor-advisory
- 19955 third-party-advisory
- 17830 vdb-entry
- 21465 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm
- 22417 third-party-advisory
- MDKSA-2006:086 vendor-advisory
- oval:org.mitre.oval:def:10102 vdb-entry signature
- 22093 third-party-advisory
- 20157 third-party-advisory
- DSA-1184 vendor-advisory