CVE-2005-3807
Linux Kernel 2.6.10-2.6.15 - Denial of Service via VFS File Lease Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3807. PoCs published by J. Bruce Fields.
AI-analyzed exploit summary This exploit demonstrates a local denial-of-service vulnerability in the Linux kernel by repeatedly setting and releasing file-lock leases, causing excessive kernel memory consumption. The issue stems from a memory leak in the kernel's file-lock lease code.
Description
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function.
Exploits (1)
This exploit demonstrates a local denial-of-service vulnerability in the Linux kernel by repeatedly setting and releasing file-lock leases, causing excessive kernel memory consumption. The issue stems from a memory leak in the kernel's file-lock lease code.