CVE-2005-0977: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.

Affected products

• Linux Linux Kernel: version 2.6.8.1.5 only

Published 2005-05-02. Last modified 2026-06-16.