CVE-2005-3274

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-21 · updated 2026-06-16
Weakness: CWE-476

Description

Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.

Affected products

Debian Linux: 3.1
Linux kernel: from 2.4.0 through 2.4.31; from 2.6.0 before 2.6.13 — fixed in 2.6.13

How to fix

Upgrade to a fixed version: Linux kernel 2.6.13. Check the vendor advisory for mitigations.

References

http://lkml.org/lkml/2005/6/23/249
http://lkml.org/lkml/2005/6/24/173
http://secunia.com/advisories/17826
http://secunia.com/advisories/18056
http://secunia.com/advisories/18684
http://secunia.com/advisories/18977
http://www.debian.org/security/2005/dsa-922
http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235

Get alerted when CVE-2005-3274 or the next vulnerability affects your stack