CVE-2005-0176

Linux <2.6.9 - Memory Corruption

Title source: llm

Description

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.

References (9)

[Vendor Advisory] http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930

[Mailing List] http://marc.info/?l=full-disclosure&m=110846102231365&w=2

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2005-092.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2005-472.html

[Vendor Advisory] ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/12598

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1225

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8778

[Third Party Advisory] http://secunia.com/advisories/19607

Scores

EPSS 0.0068

EPSS Percentile 71.3%

Classification

Status draft

Affected Products (1)

linux/linux_kernel

Timeline

Published Feb 15, 2005

Tracked Since Feb 18, 2026