imPC@ndo IT

Tracker / CVE-2005-3274

CVE-2005-3274

Medium 4.7

Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.

Affected products and versions

debian debian_linux
linux linux_kernel · 2.4.0 → 2.4.31
linux linux_kernel · 2.6.0 → 2.6.13

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References