CVE-2005-2801
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the...
7.5 High
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
3.37%Up 0.7 points since Feb 4, 2022
What each source reports
NVD Score used
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.
- Record
CVE-2005-2801- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-697
- Updated
- 2026-11-02
CVE List No score
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.
- Record
CVE-2005-2801- Updated
- 2026-11-02
EUVDEUVD-2005-2802 No score
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.
- Record
EUVD-2005-2802- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wq7h-x8rp-qhq7
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the...
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.
- Record
GHSA-wq7h-x8rp-qhq7- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-697
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.27Debian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-10sarge1, plus listed versions 2.4.27-10 |
2.4.27-10sarge1 |
kernel-image-2.4.27-alphaDebian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-10sarge1, plus listed versions 2.4.27-10 |
2.4.27-10sarge1 |
kernel-patch-2.4.27-armDebian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-1sarge1, plus listed versions 2.4.27-1 |
2.4.27-1sarge1 |
kernel-image-2.4.27-armDebian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-2sarge1, plus listed versions 2.4.27-2 |
2.4.27-2sarge1 |
kernel-image-2.4.27-i386Debian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-10sarge1, plus listed versions 2.4.27-10 |
2.4.27-10sarge1 |
kernel-image-2.4.27-ia64Debian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-10sarge1, plus listed versions 2.4.27-10 |
2.4.27-10sarge1 |
kernel-image-2.4.27-m68kDebian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-3sarge1, plus listed versions 2.4.27-3 |
2.4.27-3sarge1 |
kernel-patch-2.4.27-mipsDebian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-10.sarge1.040815-1, plus listed versions 2.4.27-10.040815-1 |
2.4.27-10.sarge1.040815-1 |
kernel-patch-powerpc-2.4.27Debian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-10sarge1, plus listed versions 2.4.27-10 |
2.4.27-10sarge1 |
kernel-image-2.4.27-s390Debian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-2sarge1, plus listed versions 2.4.27-2 |
2.4.27-2sarge1 |
Show 83 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-image-2.4.27-sparcDebian:3.1 From an advisory covering 12 CVEs |
before 2.4.27-9sarge1, plus listed versions 2.4.27-9 |
2.4.27-9sarge1 |
kernel-source-2.6.8Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-16 |
2.6.8-16sarge1 |
kernel-image-2.6.8-alphaDebian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-16 |
2.6.8-16sarge1 |
kernel-image-2.6.8-amd64Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-14 |
2.6.8-16sarge1 |
kernel-image-2.6.8-hppaDebian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-6sarge1, plus listed versions 2.6.8-6 |
2.6.8-6sarge1 |
kernel-image-2.6.8-i386Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-16 |
2.6.8-16sarge1 |
kernel-image-2.6.8-ia64Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-14sarge1, plus listed versions 2.6.8-14 |
2.6.8-14sarge1 |
kernel-image-2.6.8-m68kDebian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-4sarge1, plus listed versions 2.6.8-4 |
2.6.8-4sarge1 |
kernel-patch-powerpc-2.6.8Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-12sarge1, plus listed versions 2.6.8-12 |
2.6.8-12sarge1 |
kernel-image-2.6.8-s390Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-5sarge1, plus listed versions 2.6.8-5 |
2.6.8-5sarge1 |
kernel-image-2.6.8-sparcDebian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-15sarge1, plus listed versions 2.6.8-15 |
2.6.8-15sarge1 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:2.6.9-22.EL | 0:2.6.9-22.EL |
kernelRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-docRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-hugememRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-smpRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-sourceRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernelRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-docRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernelRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-docRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-hugememRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-smpRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-sourceRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernelRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-docRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-smpRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:2.4.21-40.EL | 0:2.4.21-40.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2801 is a high vulnerability (CVSS 7.5) in Linux Kernel, published September 6, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.37%, the 88th percentile. No source names a fixed version.
References
secunia.com/advisories/18056
redhat.com/support/errata/RHSA-2006-0144.html
novell.com/linux/security/advisories/2005_18_kernel.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10495
Show 194 moreShow less
acl.bestbits.at/pipermail/acl-devel/2005-February/001848.html
lists.debian.org/debian-kernel/2005/08/msg00238.html
debian.org/security/2005/dsa-922
securityfocus.com/archive/1/427980/100/0/threaded
mandriva.com/security/advisories?name=MDKSA-2005:219
nvd.nist.gov/vuln/detail/CVE-2005-2801
github.com/advisories/GHSA-wq7h-x8rp-qhq7
access.redhat.com/errata/RHSA-2005:514
bugzilla.redhat.com/show_bug.cgi?id=114578
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_514.json
cve.org/CVERecord?id=CVE-2005-0756
This page doesn't list everything
Left out here: 148 references. The JSON record has them.