CVE-2005-2801: Linux Kernel

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.

Affected products

  • Linux Linux Kernel: version 2.6.0 only

Published 2005-09-06. Last modified 2026-06-16.