CVE-2005-3807
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows...
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function.
Exploit likelihood
What each source reports
NVD Score used
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function.
- Record
CVE-2005-3807- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function.
- Record
CVE-2005-3807- Updated
- 2026-11-02
EUVDEUVD-2005-3802 No score
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function.
- Record
EUVD-2005-3802- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q98v-8mff-57hg No score
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows...
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function.
- Record
GHSA-q98v-8mff-57hg- Updated
- 2026-11-02
OSVBELL-CVE-2005-3807
CVE-2005-3807 does not affect BellSoft software
- Record
BELL-CVE-2005-3807- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.x - File Lock Lease Local Denial of Service | 2005-12-29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3807 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published November 25, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.74%, the 54th percentile. No source names a fixed version.
References
secunia.com/advisories/17917
securityfocus.com/advisories/9806
kernel.org/git?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc15ae14e97ee9d5ed740cbb0b94996076d8b37e
ubuntulinux.org/usn/usn-231-1
Show 9 moreShow less
marc.info?l=linux-kernel&m=113190437101622&w=2
trustix.org/errata/2005/0070
nvd.nist.gov/vuln/detail/CVE-2005-3807
github.com/advisories/GHSA-q98v-8mff-57hg
docs.bell-sw.com/security/cves/CVE-2005-3807