CVE-2005-3274: Debian Linux

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.

Affected products

• Debian Debian Linux: version 3.1 only
• Linux Linux Kernel: from 2.4.0, up to and including 2.4.31; from 2.6.0, before 2.6.13 (fixed in 2.6.13)

Published 2005-10-21. Last modified 2026-06-16.