VULNERABILITY INTELLIGENCE

CVE-2005-3660

CVSS score4.9 MEDIUM
EPSS probability0.42%
CISA KEVNot currently listed
Published2005-12-22
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process to become a zombie, or closing the file descriptor without closing an associated reference.

Primary references