peter bassill · operator
$ cve CVE-2005-1589 JSON

CVE-2005-1589 EXPLOIT

7.2
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 67)

Patch early

A public exploit exists.

Description

The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264.

Scoring

CVSS7.2 (HIGH, v2.0)
VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS1.18% — more likely to be exploited than 67% of all CVEs
On CISA KEVno
Public exploityes
Published2005-05-17
Last modified2026-06-16

Affected (1)

VendorProduct
linuxlinux kernel

Public exploits

SourceTitleDate
exploit-dbLinux Kernel 2.6.12-rc4 - 'ioctl_by_bdev' Local Denial of Service2005-05-17

References

→ the Explorer  ·  watch your stack  ·  NVD