CVE-2005-3181
Fixed in a distro release EPSS <1%
The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).
Products: linux_kernel, canonical ubuntu_linux, debian_linux, mandriva linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | kernel-source-2.6.8 | 2.6.8-16sarge2 |
| Red Hat Enterprise Linux 4 | kernel | 0:2.6.9-22.0.1.EL |
| Red Hat Enterprise Linux 4 | kernel-debuginfo | 0:2.6.9-22.0.1.EL |
| Red Hat Enterprise Linux 4 | kernel-devel | 0:2.6.9-22.0.1.EL |
| Red Hat Enterprise Linux 4 | kernel-doc | 0:2.6.9-22.0.1.EL |
| Red Hat Enterprise Linux 4 | kernel-hugemem | 0:2.6.9-22.0.1.EL |
| Red Hat Enterprise Linux 4 | kernel-hugemem-devel | 0:2.6.9-22.0.1.EL |
| Red Hat Enterprise Linux 4 | kernel-smp | 0:2.6.9-22.0.1.EL |
| Red Hat Enterprise Linux 4 | kernel-smp-devel | 0:2.6.9-22.0.1.EL |