CVE-2005-3106
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as...
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
4.7
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.
- Record
CVE-2005-3106- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:N/A:P - Weakness
- CWE-667
- Updated
- 2026-11-02
CVE List
4.7
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.
- Record
CVE-2005-3106- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-02
EUVDEUVD-2005-3106
4.7
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.
- Record
EUVD-2005-3106- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fgcr-gvff-j4cq
4.7
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as...
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.
- Record
GHSA-fgcr-gvff-j4cq- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-02
OSVBELL-CVE-2005-3106
4.7
CVE-2005-3106 does not affect BellSoft software
- Record
BELL-CVE-2005-3106- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.6.8Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-16 |
2.6.8-16sarge1 |
kernel-image-2.6.8-alphaDebian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-16 |
2.6.8-16sarge1 |
kernel-image-2.6.8-amd64Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-14 |
2.6.8-16sarge1 |
kernel-image-2.6.8-hppaDebian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-6sarge1, plus listed versions 2.6.8-6 |
2.6.8-6sarge1 |
kernel-image-2.6.8-i386Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-16 |
2.6.8-16sarge1 |
kernel-image-2.6.8-ia64Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-14sarge1, plus listed versions 2.6.8-14 |
2.6.8-14sarge1 |
kernel-image-2.6.8-m68kDebian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-4sarge1, plus listed versions 2.6.8-4 |
2.6.8-4sarge1 |
kernel-patch-powerpc-2.6.8Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-12sarge1, plus listed versions 2.6.8-12 |
2.6.8-12sarge1 |
kernel-image-2.6.8-s390Debian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-5sarge1, plus listed versions 2.6.8-5 |
2.6.8-5sarge1 |
kernel-image-2.6.8-sparcDebian:3.1 From an advisory covering 27 CVEs |
before 2.6.8-15sarge1, plus listed versions 2.6.8-15 |
2.6.8-15sarge1 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3106 is a medium vulnerability (CVSS 4.7) in Debian Linux, published September 30, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9108
secunia.com/advisories/18056
redhat.com/support/errata/RHSA-2006-0101.html
linux.bkbits.net/linux-2.6/diffs/fs/exec.c%401.156?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.c
debian.org/security/2005/dsa-922
securityfocus.com/bid/15049
Show 96 moreShow less
secunia.com/advisories/18510
secunia.com/advisories/17141
ubuntu.com/usn/usn-199-1
mandriva.com/security/advisories?name=MDKSA-2006:072
securityfocus.com/archive/1/427980/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2005-3106
linux.bkbits.net/linux-2.6/diffs/fs/[email protected]?nav=index.html|src/|src/fs|hist/fs/exec.c
github.com/advisories/GHSA-fgcr-gvff-j4cq
docs.bell-sw.com/security/cves/CVE-2005-3106
access.redhat.com/errata/RHSA-2006:0101
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=158861
bugzilla.redhat.com/show_bug.cgi?id=165679
bugzilla.redhat.com/show_bug.cgi?id=167696
bugzilla.redhat.com/show_bug.cgi?id=168659
bugzilla.redhat.com/show_bug.cgi?id=168777
bugzilla.redhat.com/show_bug.cgi?id=168924
bugzilla.redhat.com/show_bug.cgi?id=169130
bugzilla.redhat.com/show_bug.cgi?id=170262
bugzilla.redhat.com/show_bug.cgi?id=171002
bugzilla.redhat.com/show_bug.cgi?id=174078
bugzilla.redhat.com/show_bug.cgi?id=174081
bugzilla.redhat.com/show_bug.cgi?id=174337
bugzilla.redhat.com/show_bug.cgi?id=174343
bugzilla.redhat.com/show_bug.cgi?id=174345
bugzilla.redhat.com/show_bug.cgi?id=174807
bugzilla.redhat.com/show_bug.cgi?id=175683
bugzilla.redhat.com/show_bug.cgi?id=176812
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0101.json
access.redhat.com/security/cve/CVE-2002-2185
bugzilla.redhat.com/show_bug.cgi?id=1616930
cve.org/CVERecord?id=CVE-2002-2185
nvd.nist.gov/vuln/detail/CVE-2002-2185
access.redhat.com/security/cve/CVE-2004-1190
bugzilla.redhat.com/show_bug.cgi?id=1617395
cve.org/CVERecord?id=CVE-2004-1190
nvd.nist.gov/vuln/detail/CVE-2004-1190
access.redhat.com/security/cve/CVE-2005-2458
bugzilla.redhat.com/show_bug.cgi?id=1617720
cve.org/CVERecord?id=CVE-2005-2458
nvd.nist.gov/vuln/detail/CVE-2005-2458
access.redhat.com/security/cve/CVE-2005-2709
bugzilla.redhat.com/show_bug.cgi?id=1617751
cve.org/CVERecord?id=CVE-2005-2709
nvd.nist.gov/vuln/detail/CVE-2005-2709
access.redhat.com/security/cve/CVE-2005-2800
bugzilla.redhat.com/show_bug.cgi?id=1617758
cve.org/CVERecord?id=CVE-2005-2800
nvd.nist.gov/vuln/detail/CVE-2005-2800
access.redhat.com/security/cve/CVE-2005-3044
bugzilla.redhat.com/show_bug.cgi?id=1617776
cve.org/CVERecord?id=CVE-2005-3044
nvd.nist.gov/vuln/detail/CVE-2005-3044
access.redhat.com/security/cve/CVE-2005-3106
bugzilla.redhat.com/show_bug.cgi?id=1617782
cve.org/CVERecord?id=CVE-2005-3106
access.redhat.com/security/cve/CVE-2005-3109
bugzilla.redhat.com/show_bug.cgi?id=1617786
cve.org/CVERecord?id=CVE-2005-3109
nvd.nist.gov/vuln/detail/CVE-2005-3109
access.redhat.com/security/cve/CVE-2005-3276
bugzilla.redhat.com/show_bug.cgi?id=1617813
cve.org/CVERecord?id=CVE-2005-3276
nvd.nist.gov/vuln/detail/CVE-2005-3276
access.redhat.com/security/cve/CVE-2005-3356
bugzilla.redhat.com/show_bug.cgi?id=1617817
cve.org/CVERecord?id=CVE-2005-3356
nvd.nist.gov/vuln/detail/CVE-2005-3356
access.redhat.com/security/cve/CVE-2005-3358
bugzilla.redhat.com/show_bug.cgi?id=1617819
cve.org/CVERecord?id=CVE-2005-3358
nvd.nist.gov/vuln/detail/CVE-2005-3358
access.redhat.com/security/cve/CVE-2005-3784
bugzilla.redhat.com/show_bug.cgi?id=1617839
cve.org/CVERecord?id=CVE-2005-3784
nvd.nist.gov/vuln/detail/CVE-2005-3784
access.redhat.com/security/cve/CVE-2005-3806
bugzilla.redhat.com/show_bug.cgi?id=1617840
cve.org/CVERecord?id=CVE-2005-3806
nvd.nist.gov/vuln/detail/CVE-2005-3806
access.redhat.com/security/cve/CVE-2005-3848
bugzilla.redhat.com/show_bug.cgi?id=1617841
cve.org/CVERecord?id=CVE-2005-3848
nvd.nist.gov/vuln/detail/CVE-2005-3848
access.redhat.com/security/cve/CVE-2005-3857
bugzilla.redhat.com/show_bug.cgi?id=1617842
cve.org/CVERecord?id=CVE-2005-3857
nvd.nist.gov/vuln/detail/CVE-2005-3857
access.redhat.com/security/cve/CVE-2005-3858
bugzilla.redhat.com/show_bug.cgi?id=1617843
cve.org/CVERecord?id=CVE-2005-3858
nvd.nist.gov/vuln/detail/CVE-2005-3858
access.redhat.com/security/cve/CVE-2005-4605
bugzilla.redhat.com/show_bug.cgi?id=1617860
cve.org/CVERecord?id=CVE-2005-4605
nvd.nist.gov/vuln/detail/CVE-2005-4605