CVE-2005-2800: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.

Affected products

• Linux Linux Kernel: version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.3 only; version 2.6.4 only; version 2.6.5 only; …

Published 2005-09-06. Last modified 2026-06-16.