CVE-2005-3257
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including...
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
Exploit likelihood
What each source reports
NVD Score used
4.6
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
- Record
CVE-2005-3257- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
- Record
CVE-2005-3257- Updated
- 2026-11-02
EUVDEUVD-2005-3256 No score
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
- Record
EUVD-2005-3256- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j6qw-vjcv-x9q7 No score
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including...
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
- Record
GHSA-j6qw-vjcv-x9q7- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.6.8Debian:3.1 From an advisory covering 30 CVEs |
before 2.6.8-16sarge2, plus listed versions 2.6.8-162.6.8-16sarge1 |
2.6.8-16sarge2 |
kernel-source-2.4.27Debian:3.1 From an advisory covering 16 CVEs |
before 2.4.27-10sarge2, plus listed versions 2.4.27-102.4.27-10sarge1 |
2.4.27-10sarge2 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
Show 40 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.6.9-55.EL | 0:2.6.9-55.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6 - Console Keymap Local Command Injection | 2005-10-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3257 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published October 18, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.06%, the 64th percentile. No source names a fixed version.
References
mandriva.com/security/advisories?name=MDKSA-2005:235
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615
mandriva.com/security/advisories?name=MDKSA-2005:220
secunia.com/advisories/19369
secunia.com/advisories/18203
secunia.com/advisories/17226
Show 175 moreShow less
debian.org/security/2006/dsa-1018
bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113
secunia.com/advisories/19185
securityfocus.com/bid/15122
rhn.redhat.com/errata/RHBA-2007-0304.html
mandriva.com/security/advisories?name=MDKSA-2005:218
secunia.com/advisories/17826
debian.org/security/2006/dsa-1017
mandriva.com/security/advisories?name=MDKSA-2005:219
secunia.com/advisories/19374
usn.ubuntu.com/231-1
secunia.com/advisories/17995
nvd.nist.gov/vuln/detail/CVE-2005-3257
github.com/advisories/GHSA-j6qw-vjcv-x9q7
access.redhat.com/errata/RHBA-2007:0304
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=143897
bugzilla.redhat.com/show_bug.cgi?id=149620
bugzilla.redhat.com/show_bug.cgi?id=155929
bugzilla.redhat.com/show_bug.cgi?id=158363
bugzilla.redhat.com/show_bug.cgi?id=159733
bugzilla.redhat.com/show_bug.cgi?id=161591
bugzilla.redhat.com/show_bug.cgi?id=167398
bugzilla.redhat.com/show_bug.cgi?id=167715
bugzilla.redhat.com/show_bug.cgi?id=168801
bugzilla.redhat.com/show_bug.cgi?id=172357
bugzilla.redhat.com/show_bug.cgi?id=172476
bugzilla.redhat.com/show_bug.cgi?id=172730
bugzilla.redhat.com/show_bug.cgi?id=174397
bugzilla.redhat.com/show_bug.cgi?id=175869
bugzilla.redhat.com/show_bug.cgi?id=176455
bugzilla.redhat.com/show_bug.cgi?id=176738
bugzilla.redhat.com/show_bug.cgi?id=176879
bugzilla.redhat.com/show_bug.cgi?id=177429
bugzilla.redhat.com/show_bug.cgi?id=177624
bugzilla.redhat.com/show_bug.cgi?id=178981
bugzilla.redhat.com/show_bug.cgi?id=180980
bugzilla.redhat.com/show_bug.cgi?id=183211
bugzilla.redhat.com/show_bug.cgi?id=183665
bugzilla.redhat.com/show_bug.cgi?id=184396
bugzilla.redhat.com/show_bug.cgi?id=184510
bugzilla.redhat.com/show_bug.cgi?id=185316
bugzilla.redhat.com/show_bug.cgi?id=185762
bugzilla.redhat.com/show_bug.cgi?id=186074
bugzilla.redhat.com/show_bug.cgi?id=186325
bugzilla.redhat.com/show_bug.cgi?id=186604
bugzilla.redhat.com/show_bug.cgi?id=187183
bugzilla.redhat.com/show_bug.cgi?id=187295
bugzilla.redhat.com/show_bug.cgi?id=187520
bugzilla.redhat.com/show_bug.cgi?id=187731
bugzilla.redhat.com/show_bug.cgi?id=187930
bugzilla.redhat.com/show_bug.cgi?id=189238
bugzilla.redhat.com/show_bug.cgi?id=189434
bugzilla.redhat.com/show_bug.cgi?id=189588
bugzilla.redhat.com/show_bug.cgi?id=189963
bugzilla.redhat.com/show_bug.cgi?id=191332
bugzilla.redhat.com/show_bug.cgi?id=191552
bugzilla.redhat.com/show_bug.cgi?id=191780
bugzilla.redhat.com/show_bug.cgi?id=191831
bugzilla.redhat.com/show_bug.cgi?id=191912
bugzilla.redhat.com/show_bug.cgi?id=191933
bugzilla.redhat.com/show_bug.cgi?id=192760
bugzilla.redhat.com/show_bug.cgi?id=193185
bugzilla.redhat.com/show_bug.cgi?id=193937
bugzilla.redhat.com/show_bug.cgi?id=194055
bugzilla.redhat.com/show_bug.cgi?id=194408
bugzilla.redhat.com/show_bug.cgi?id=196723
bugzilla.redhat.com/show_bug.cgi?id=197158
bugzilla.redhat.com/show_bug.cgi?id=197797
bugzilla.redhat.com/show_bug.cgi?id=197949
bugzilla.redhat.com/show_bug.cgi?id=198657
bugzilla.redhat.com/show_bug.cgi?id=198749
bugzilla.redhat.com/show_bug.cgi?id=198847
bugzilla.redhat.com/show_bug.cgi?id=199167
bugzilla.redhat.com/show_bug.cgi?id=199622
bugzilla.redhat.com/show_bug.cgi?id=199977
bugzilla.redhat.com/show_bug.cgi?id=200415
bugzilla.redhat.com/show_bug.cgi?id=201058
bugzilla.redhat.com/show_bug.cgi?id=201219
bugzilla.redhat.com/show_bug.cgi?id=201622
bugzilla.redhat.com/show_bug.cgi?id=201781
bugzilla.redhat.com/show_bug.cgi?id=202130
bugzilla.redhat.com/show_bug.cgi?id=202412
bugzilla.redhat.com/show_bug.cgi?id=202735
bugzilla.redhat.com/show_bug.cgi?id=203894
bugzilla.redhat.com/show_bug.cgi?id=203897
bugzilla.redhat.com/show_bug.cgi?id=204063
bugzilla.redhat.com/show_bug.cgi?id=204281
bugzilla.redhat.com/show_bug.cgi?id=204791
bugzilla.redhat.com/show_bug.cgi?id=204940
bugzilla.redhat.com/show_bug.cgi?id=205001
bugzilla.redhat.com/show_bug.cgi?id=207244
bugzilla.redhat.com/show_bug.cgi?id=207440
bugzilla.redhat.com/show_bug.cgi?id=207668
bugzilla.redhat.com/show_bug.cgi?id=207669
bugzilla.redhat.com/show_bug.cgi?id=207672
bugzilla.redhat.com/show_bug.cgi?id=207673
bugzilla.redhat.com/show_bug.cgi?id=208624
bugzilla.redhat.com/show_bug.cgi?id=208648
bugzilla.redhat.com/show_bug.cgi?id=209850
bugzilla.redhat.com/show_bug.cgi?id=209852
bugzilla.redhat.com/show_bug.cgi?id=210779
bugzilla.redhat.com/show_bug.cgi?id=210852
bugzilla.redhat.com/show_bug.cgi?id=211486
bugzilla.redhat.com/show_bug.cgi?id=211920
bugzilla.redhat.com/show_bug.cgi?id=212055
bugzilla.redhat.com/show_bug.cgi?id=212122
bugzilla.redhat.com/show_bug.cgi?id=212398
bugzilla.redhat.com/show_bug.cgi?id=214544
bugzilla.redhat.com/show_bug.cgi?id=214778
bugzilla.redhat.com/show_bug.cgi?id=214996
bugzilla.redhat.com/show_bug.cgi?id=215931
bugzilla.redhat.com/show_bug.cgi?id=215939
bugzilla.redhat.com/show_bug.cgi?id=215941
bugzilla.redhat.com/show_bug.cgi?id=215944
bugzilla.redhat.com/show_bug.cgi?id=215945
bugzilla.redhat.com/show_bug.cgi?id=215947
bugzilla.redhat.com/show_bug.cgi?id=216895
bugzilla.redhat.com/show_bug.cgi?id=217050
bugzilla.redhat.com/show_bug.cgi?id=217546
bugzilla.redhat.com/show_bug.cgi?id=217581
bugzilla.redhat.com/show_bug.cgi?id=217726
bugzilla.redhat.com/show_bug.cgi?id=217886
bugzilla.redhat.com/show_bug.cgi?id=217932
bugzilla.redhat.com/show_bug.cgi?id=218266
bugzilla.redhat.com/show_bug.cgi?id=218664
bugzilla.redhat.com/show_bug.cgi?id=218777
bugzilla.redhat.com/show_bug.cgi?id=218946
bugzilla.redhat.com/show_bug.cgi?id=219149
bugzilla.redhat.com/show_bug.cgi?id=219152
bugzilla.redhat.com/show_bug.cgi?id=219615
bugzilla.redhat.com/show_bug.cgi?id=219616
bugzilla.redhat.com/show_bug.cgi?id=219630
bugzilla.redhat.com/show_bug.cgi?id=219730
bugzilla.redhat.com/show_bug.cgi?id=219761
bugzilla.redhat.com/show_bug.cgi?id=220149
bugzilla.redhat.com/show_bug.cgi?id=220602
bugzilla.redhat.com/show_bug.cgi?id=220850
bugzilla.redhat.com/show_bug.cgi?id=221273
bugzilla.redhat.com/show_bug.cgi?id=221975
bugzilla.redhat.com/show_bug.cgi?id=222229
bugzilla.redhat.com/show_bug.cgi?id=222695
bugzilla.redhat.com/show_bug.cgi?id=223280
bugzilla.redhat.com/show_bug.cgi?id=223865
bugzilla.redhat.com/show_bug.cgi?id=227898
bugzilla.redhat.com/show_bug.cgi?id=228059
bugzilla.redhat.com/show_bug.cgi?id=228531
bugzilla.redhat.com/show_bug.cgi?id=229780
bugzilla.redhat.com/show_bug.cgi?id=232526
bugzilla.redhat.com/show_bug.cgi?id=233114
bugzilla.redhat.com/show_bug.cgi?id=233170
security.access.redhat.com/data/csaf/v2/advisories/2007/rhba-2007_0304.json
access.redhat.com/security/cve/CVE-2005-2873
bugzilla.redhat.com/show_bug.cgi?id=1617762
cve.org/CVERecord?id=CVE-2005-2873
nvd.nist.gov/vuln/detail/CVE-2005-2873
access.redhat.com/security/cve/CVE-2005-3257
bugzilla.redhat.com/show_bug.cgi?id=1617808
cve.org/CVERecord?id=CVE-2005-3257
access.redhat.com/security/cve/CVE-2006-0557
bugzilla.redhat.com/show_bug.cgi?id=1618010
cve.org/CVERecord?id=CVE-2006-0557
nvd.nist.gov/vuln/detail/CVE-2006-0557
access.redhat.com/security/cve/CVE-2006-1863
bugzilla.redhat.com/show_bug.cgi?id=1618070
cve.org/CVERecord?id=CVE-2006-1863
nvd.nist.gov/vuln/detail/CVE-2006-1863
access.redhat.com/security/cve/CVE-2007-1592
bugzilla.redhat.com/show_bug.cgi?id=243258
cve.org/CVERecord?id=CVE-2007-1592
nvd.nist.gov/vuln/detail/CVE-2007-1592
access.redhat.com/security/cve/CVE-2007-3379
bugzilla.redhat.com/show_bug.cgi?id=1618314
cve.org/CVERecord?id=CVE-2007-3379
nvd.nist.gov/vuln/detail/CVE-2007-3379