CVE-2005-3055

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-09-26 · updated 2026-06-16
Weakness: CWE-20

Description

Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.

Affected products

Debian Linux: 3.1
Linux kernel: 2.6.8, 2.6.8-rc1, 2.6.8-rc2, 2.6.8-rc3, 2.6.9-2.6.20, 2.6.10 (+27)

References

http://marc.info/?l=linux-kernel&m=112766129313883
http://secunia.com/advisories/17826
http://secunia.com/advisories/17917
http://secunia.com/advisories/17918
http://secunia.com/advisories/19374
http://secunia.com/advisories/21035
http://secunia.com/advisories/21136
http://secunia.com/advisories/21465
http://secunia.com/advisories/21983
http://secunia.com/advisories/22417
http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Get alerted when CVE-2005-3055 or the next vulnerability affects your stack