CVE-2005-2800: Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and e...

Security readout for executives and security teams

This is an old Linux kernel local denial-of-service flaw. A logged-in local user could consume kernel memory by abusing the SCSI procfs device listing. The sources do not show remote exploitation or privilege escalation. Business impact is mainly availability risk on legacy Linux systems still running affected 2.6-era kernels. Exposure is likely limited to legacy Linux systems running kernel 2.6.13 or earlier with the SCSI generic procfs interface present. Systems also need local user access for practical abuse. Modern maintained distributions are unlikely to be exposed, but old appliances, embedded systems, and unsupported servers should be checked. Handle through legacy-system risk management, not emergency incident response. Prioritize internet-facing business-critical systems only if they also allow local user access. The bigger concern is unsupported kernel age and operational fragility, not this CVE alone. Mitigation focus: Check the relevant Linux distribution vendor advisory for fixed kernel packages.; Upgrade affected kernels and reboot into the corrected kernel.; Reduce or remove untrusted local shell access on legacy systems..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.