CVE-2005-1913

Linux kernel < 2.6.12.1 - Denial of Service via itimer Signal Handling

Title source: llm
STIX 2.1

Description

The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist.

References (5)

Core 5
Core References
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15786/
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-178-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/21138
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14054

Scores

EPSS 0.0039
EPSS Percentile 31.9%

Details

Status published
Products (19)
linux/linux_kernel 2.6.0 (12 CPE variants)
linux/linux_kernel 2.6.1 (3 CPE variants)
linux/linux_kernel 2.6.2
linux/linux_kernel 2.6.3
linux/linux_kernel 2.6.4
linux/linux_kernel 2.6.5
linux/linux_kernel 2.6.6 (2 CPE variants)
linux/linux_kernel 2.6.7 (2 CPE variants)
linux/linux_kernel 2.6.8 (4 CPE variants)
linux/linux_kernel 2.6.9 2.6.20
... and 9 more
Published Sep 14, 2005
Tracked Since Feb 18, 2026