CVE-2005-3181: Canonical Ubuntu Linux

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).

Affected products

• Canonical Ubuntu Linux: version 4.10 only; version 5.04 only
• Debian Debian Linux: version 3.1 only
• Linux Linux Kernel: from 2.6.0, up to and including 2.6.13.3
• Mandriva Linux: version 10.1 only; version 10.2 only; version 2006.0 only

Published 2005-10-12. Last modified 2026-06-16.