CVE-2005-3275: Linux Kernel

Low severity, CVSS 2.6. EPSS: 3.3% chance of exploitation in the next 30 days.

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

Affected products

• Linux Linux Kernel: version 2.4.0 only; version 2.4.18 only; version 2.4.19 only; version 2.4.21 only; version 2.4.22 only; version 2.4.23 only; …

Published 2005-10-21. Last modified 2026-06-16.