Description
Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.
References (27)
Core 27
Core References
Broken Link vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235
Not Applicable vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0437.html
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17917
Third Party Advisory, VDB Entry vendor-advisory
x_refsource_suse
http://www.securityfocus.com/advisories/9806
Vendor Advisory vendor-advisory
x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
Not Applicable vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0579.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9472
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=linux-kernel&m=112766129313883
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21136
Third Party Advisory, VDB Entry vendor-advisory
x_refsource_suse
http://www.securityfocus.com/archive/1/419522/100/0/threaded
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21983
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21035
Not Applicable vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0575.html
Vendor Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/219-1/
Not Applicable vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0580.html
Vendor Advisory x_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm
Broken Link vendor-advisory
x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21465
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14955
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17826
Broken Link vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/1863
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17918
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2006/dsa-1017
Third Party Advisory x_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm
Vendor Advisory vendor-advisory
x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/22417
Permissions Required, Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/19374
Scores
EPSS
0.0045
EPSS Percentile
36.4%
Details
CWE
CWE-20
Status
published
Products (20)
debian/debian_linux
3.1
linux/linux_kernel
2.6.8 (4 CPE variants)
linux/linux_kernel
2.6.9 2.6.20
linux/linux_kernel
2.6.10 (2 CPE variants)
linux/linux_kernel
2.6.11 (4 CPE variants)
linux/linux_kernel
2.6.11.5
linux/linux_kernel
2.6.11.6
linux/linux_kernel
2.6.11.7
linux/linux_kernel
2.6.11.8
linux/linux_kernel
2.6.11.11
... and 10 more
Published
Sep 26, 2005
Tracked Since
Feb 18, 2026