CVE-2005-2709

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-20 · updated 2026-06-16
Weakness: CWE-399

Description

The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.

Affected products

Linux kernel: through 2.6.14; 2.2.27, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5 (+101)

References

http://secunia.com/advisories/17504
http://secunia.com/advisories/17541
http://secunia.com/advisories/17648
http://secunia.com/advisories/18510
http://secunia.com/advisories/18562
http://secunia.com/advisories/18684
http://secunia.com/advisories/19369
http://secunia.com/advisories/19374
http://securitytracker.com/id?1015434
http://www.debian.org/security/2006/dsa-1017
http://www.debian.org/security/2006/dsa-1018
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.1

Get alerted when CVE-2005-2709 or the next vulnerability affects your stack