{"id":"CVE-2005-1264","aliases":["EUVD-2005-1267","GHSA-vrh3-vx52-7gxc","RHSA-2005:420"],"status":"published","title":"Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an...","description":"Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00534,"percentile":0.45341,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-05-17T04:00:00Z","modified":"2026-06-26T10:03:11Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-11.EL"}]}],"bundled":5}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2005/0557","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13651","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-420.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://marc.info/?l=linux-kernel\u0026m=111630512512222","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1264","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vrh3-vx52-7gxc"},{"url":"https://access.redhat.com/errata/RHSA-2005:420","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=133590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=134338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=137154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=138563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=140083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=140383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=140472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=141699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=141983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=142167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=142464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=143073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=143472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=143907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=144741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=145424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=147832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=150110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=150151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=151284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=152101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=152102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=152557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=154221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=154639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=154972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=155283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=155765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=156875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=157450","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_420.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0136","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617496","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0209","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0937","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0937","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1264","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-3107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3107","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3107","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-1264","description":"Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.","status":"published","published":"2005-05-17T04:00:00Z","modified":"2024-08-07T21:44:05.871Z","updated_at":"2026-11-02T14:33:39.916766Z"}],"euvd":[{"id":"EUVD-2005-1267","description":"Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.","status":"published","published":"2005-05-17T04:00:00Z","modified":"2024-08-07T21:44:05Z","updated_at":"2026-11-03T01:15:35.001625Z"}],"ghsa":[{"id":"GHSA-vrh3-vx52-7gxc","title":"Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an...","description":"Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.","status":"published","published":"2022-05-01T01:56:52Z","modified":"2023-01-30T05:07:24Z","updated_at":"2026-11-02T14:47:41.27839Z"}],"nvd":[{"id":"CVE-2005-1264","description":"Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.","status":"published","published":"2005-05-17T04:00:00Z","modified":"2026-06-16T22:12:44.773Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.266741Z"}],"osv":[{"id":"RHSA-2005:420","title":"Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 1","status":"published","published":"2024-09-15T15:29:44Z","modified":"2026-06-26T10:03:11Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}