CVE-2005-0867: Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file.

Security readout for executives and security teams

This is an old Linux kernel 2.6 local privilege-risk issue. A user who already has local access could trigger an integer overflow through a sysfs file and overwrite kernel memory. That can threaten system integrity, but the provided sources do not show remote exposure or active exploitation. Exposure is most likely on legacy Linux systems still running affected 2.6-era kernels, especially multi-user servers or systems where untrusted users have local shell, service, or workload access. Treat this as a legacy estate hygiene issue with local privilege implications. It is not shown as actively exploited, but unpatched Linux 2.6 systems are broadly obsolete and should be patched, isolated, or retired. Mitigation focus: Identify any Linux 2.6 systems in production, lab, or embedded environments.; Check Red Hat, SUSE, Fedora, and OVAL guidance for affected and fixed kernel packages.; Update affected kernels using the relevant distribution-supported packages..

Prepared

Jun 29, 2026, 23:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.