CVE-2005-3847

MEDIUM

Linux Kernel 2.6.11-2.6.12.6 - Denial of Service via SIGKILL to Real-Time Threaded Process

Title source: llm
STIX 2.1

Description

The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service (deadlock) by sending a SIGKILL to a real-time threaded process while it is performing a core dump.

References (9)

Core 9
Core References
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16856
Patch, Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1017
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19038
Mailing List, Patch mailing-list x_refsource_mlist
http://marc.info/?l=linux-kernel&m=112508422716574&w=2
Broken Link vendor-advisory x_refsource_suse
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19374
Mailing List, Patch mailing-list x_refsource_mlist
http://marc.info/?l=linux-kernel&m=112430346613450&w=2

Scores

CVSS v3 5.5
EPSS 0.0027
EPSS Percentile 18.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-667
Status published
Products (2)
debian/debian_linux 3.1
linux/linux_kernel 2.6.11 - 2.6.13
Published Nov 27, 2005
Tracked Since Feb 18, 2026