CVE-2005-0001

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion.

Affected products

Linux kernel: 2.2.7, 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4 (+36)
Red Hat Enterprise Linux: 3.0, 4.0
RedHat Enterprise Linux Desktop: 3.0, 4.0
Trustix Secure Linux: 2, 2.1, 2.2

References

http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930
http://isec.pl/vulnerabilities/isec-0022-pagefault.txt
http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030826.html
http://marc.info/?l=bugtraq&m=110554694522719&w=2
http://marc.info/?l=bugtraq&m=110581146702951&w=2
http://secunia.com/advisories/13822
http://secunia.com/advisories/20163
http://secunia.com/advisories/20202
http://secunia.com/advisories/20338
http://securitytracker.com/id?1012862
http://www.debian.org/security/2006/dsa-1067
http://www.debian.org/security/2006/dsa-1069

Get alerted when CVE-2005-0001 or the next vulnerability affects your stack