CVE-2005-3106

MediumCVSS 4.7/10Last modified Jun 16, 2026

Description

Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-667

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.156?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.cBroken Link
http://secunia.com/advisories/17141Broken Link
http://secunia.com/advisories/18056Broken Link
http://secunia.com/advisories/18510Broken Link
http://www.debian.org/security/2005/dsa-922Mailing List
http://www.mandriva.com/security/advisories?name=MDKSA-2006:072Patch, Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2006-0101.htmlBroken Link
http://www.securityfocus.com/archive/1/427980/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/15049Broken Link, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-199-1Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9108Broken Link
http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.156?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.cBroken Link
http://secunia.com/advisories/17141Broken Link
http://secunia.com/advisories/18056Broken Link
http://secunia.com/advisories/18510Broken Link
http://www.debian.org/security/2005/dsa-922Mailing List
http://www.mandriva.com/security/advisories?name=MDKSA-2006:072Patch, Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2006-0101.htmlBroken Link
http://www.securityfocus.com/archive/1/427980/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/15049Broken Link, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-199-1Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9108Broken Link

Timeline

Published: Sep 30, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-31072.1fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local users to cause a denial CVE-2005-31082.1mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a c CVE-2005-31092.1The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem t CVE-2005-31102.6Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, m CVE-2005-31112.1The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbi CVE-2005-31122.1The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attack CVE-2005-31137.5The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by s CVE-2005-31147.5Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service CVE-2005-31152.1mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat CVE-2005-311610.0Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to CVE-2005-31187.5Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run withou CVE-2005-31192.1Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a d