CVEvulnerability

CVE-2005-3181

2.1 LOW Published 2005-10-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-10-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-401

Description

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).

Affected configurations

• linux linux kernel (>= 2.6.0 <= 2.6.13.3) • canonical ubuntu linux 4.10 • canonical ubuntu linux 5.04 • debian debian linux 3.1 • mandriva linux 10.1 • mandriva linux 10.2 • mandriva linux 2006.0

Related

Weakness · CWE (1)

  • CWE-401 Missing Release of Memory after Effective Lifetime weakness

Referenced by CWE · observed example (1)

  • CWE-401 Missing Release of Memory after Effective Lifetime weakness

References