CVE-2005-3180: The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a pre...

Security readout for executives and security teams

CVE-2005-3180 is an old Linux kernel information-disclosure issue in the Orinoco wireless driver. On affected systems, stale packet memory may be exposed to a remote attacker. Business urgency is mainly for legacy Linux assets still running kernel 2.6.13 or earlier with this driver present. Exposure is most likely on legacy Linux systems using kernel 2.6.13 or earlier with the Orinoco wireless driver built or loaded. Systems running newer or vendor-patched kernels, or systems without this driver or relevant wireless hardware, are less likely to be exposed. Treat this as a legacy exposure cleanup item unless affected wireless Linux systems are still operational. It is not KEV-listed and has no provided active-exploitation evidence, but exposed systems may leak sensitive memory and should be patched or retired. Mitigation focus: Identify systems running Linux kernel 2.6.13 or earlier.; Check whether the Orinoco driver is built, loaded, or deployed.; Apply vendor kernel updates referenced by Red Hat, Ubuntu, Mandriva, SUSE, or Fedora..

Prepared

Jun 29, 2026, 17:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.