Description
Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process to become a zombie, or closing the file descriptor without closing an associated reference.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | No fix yet | — |
| Debian 13 | linux | No fix yet | — |
| Debian 12 | linux | No fix yet | — |
References
- 291 third-party-advisory
- 16041 vdb-entry
- 20051222 Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability third-party-advisory
- ADV-2005-3076 vdb-entry
- 1015402 vdb-entry
- kernel-socket-dos(23835) vdb-entry
- 18205 third-party-advisory