CVE-2005-3784

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-23 · updated 2026-06-16
Weakness: CWE-399

Description

The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges.

Affected products

Linux kernel: 2.6.0, 2.6.1, 2.6.10, 2.6.11, 2.6.11.1, 2.6.11.2 (+31)

References

http://secunia.com/advisories/17786
http://secunia.com/advisories/17787
http://secunia.com/advisories/17917
http://secunia.com/advisories/17918
http://secunia.com/advisories/18203
http://secunia.com/advisories/18510
http://secunia.com/advisories/19374
http://www.debian.org/security/2006/dsa-1017
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739
http://www.mandriva.com/security/advisories?name=MDKSA-2006:018
http://www.redhat.com/support/errata/RHSA-2006-0101.html
http://www.securityfocus.com/advisories/9806

Get alerted when CVE-2005-3784 or the next vulnerability affects your stack