CVE-2005-0977

Linux Kernel - Denial of Service via shmem_nopage Address Verification

Title source: llm
STIX 2.1

Description

The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10400
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-366.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/103-1/
Various Sources x_refsource_confirm
http://lkml.org/lkml/2005/2/5/111
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/12970
Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora
http://www.securityfocus.com/archive/1/427980/100/0/threaded

Scores

EPSS 0.0036
EPSS Percentile 28.6%

Details

Status published
Products (1)
linux/linux_kernel 2.6.8.1.5 (16 CPE variants)
Published May 02, 2005
Tracked Since Feb 18, 2026