CVE-2005-3857

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-27 · updated 2026-06-16
Weakness: CWE-399

Description

The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.

Affected products

Linux kernel: through 2.6.15; 2.6.0, 2.6.1, 2.6.1-rc1, 2.6.1-rc2, 2.6.1-rc3, 2.6.2 (+97)

References

http://marc.info/?l=linux-kernel&m=113175851920568&w=2
http://marc.info/?l=linux-kernel&m=113190437101622&w=2
http://secunia.com/advisories/17786
http://secunia.com/advisories/17787
http://secunia.com/advisories/18203
http://secunia.com/advisories/18510
http://secunia.com/advisories/18562
http://secunia.com/advisories/19369
http://secunia.com/advisories/19374
http://secunia.com/advisories/19607
http://www.debian.org/security/2006/dsa-1017

Get alerted when CVE-2005-3857 or the next vulnerability affects your stack