CVE-2005-1589

Linux Kernel < 2.6.12 - Denial of Service and Arbitrary Code Execution via pkt_ioctl Function

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-1589. PoCs published by alert7.

AI-analyzed exploit summary This PoC exploits a vulnerability in the pktcdvd driver in Linux kernels up to 2.6.12-rc4 by writing arbitrary data to the IDT (Interrupt Descriptor Table), causing a system crash. It demonstrates a denial-of-service (DoS) condition but does not include a root shell or further exploitation.

Description

The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264.

Exploits (1)

exploitdb WORKING POC VERIFIED
by alert7 · cdoslinux
https://www.exploit-db.com/exploits/998

This PoC exploits a vulnerability in the pktcdvd driver in Linux kernels up to 2.6.12-rc4 by writing arbitrary data to the IDT (Interrupt Descriptor Table), causing a system crash. It demonstrates a denial-of-service (DoS) condition but does not include a root shell or further exploitation.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Linux kernel (pktcdvd driver) up to 2.6.12-rc4
No auth needed
Prerequisites: User must have read access to the pktcdvd block device (e.g., /dev/hdc)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=linux-kernel&m=111630531515901&w=2
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/0557
Exploit, Patch, Vendor Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13651
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0047.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17826
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

Scores

EPSS 0.0118
EPSS Percentile 63.7%

Details

Status published
Products (1)
linux/linux_kernel < 2.6.12
Published May 17, 2005
Tracked Since Feb 18, 2026