CVE-2005-2617
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64...
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insert_vm_struct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers.
Exploit likelihood
What each source reports
NVD Score used
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insert_vm_struct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers.
- Record
CVE-2005-2617- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insert_vm_struct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers.
- Record
CVE-2005-2617- Updated
- 2026-11-02
EUVDEUVD-2005-2618 No score
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insert_vm_struct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers.
- Record
EUVD-2005-2618- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6gg7-c2v3-mxxq No score
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64...
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insert_vm_struct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers.
- Record
GHSA-6gg7-c2v3-mxxq- Updated
- 2026-11-02
OSVBELL-CVE-2005-2617
CVE-2005-2617 does not affect BellSoft software
- Record
BELL-CVE-2005-2617- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2617 is a low vulnerability (CVSS 3.6) in Linux Kernel, published August 17, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.
References
kernel.org/git?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8
nvd.nist.gov/vuln/detail/CVE-2005-2617
github.com/advisories/GHSA-6gg7-c2v3-mxxq
docs.bell-sw.com/security/cves/CVE-2005-2617