What is CVE-2005-2801?

CVE-2005-2801 is a High severity Linux kernel vulnerability with a CVSS score of 7.5 out of 10. CVE-2005-2801 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2005-2801?

CVE-2005-2801 has a CVSS score of 7.5 out of 10, rated High severity. The vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Is there a patch available for CVE-2005-2801?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2005-2801 patch availability.

Is CVE-2005-2801 actively exploited?

CVE-2005-2801 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2005-2801

High

xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.

Package Linux Kernel

Published 2005-09-06

Last modified 2026-04-16

CVSS version 3.1

Patch available

Awaiting data

CVSS 3.1 score

7.5

out of 10

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

None

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness type

CWE-697

CVE-2005-2801 is classified as CWE-697

See CWE-697 on MITRE CWE for full details on this weakness type.

References

16 total

Acl
http://acl.bestbits.at/pipermail/acl-devel/2005-February/001848.html

Broken Link Exploit
Novell
http://www.novell.com/linux/security/advisories/2005_18_kernel.html

Broken Link Patch Vendor Advisory
Debian Security
http://lists.debian.org/debian-kernel/2005/08/msg00238.html

Mailing List Patch
Secunia
http://secunia.com/advisories/17073

Broken Link
Secunia
http://secunia.com/advisories/17826

Broken Link

Showing 5 of 16 references View all on NVD

Details

CVE ID CVE-2005-2801

Severity High

CVSS score 7.5 / 10

CVSS version 3.1

Published 2005-09-06

Modified 2026-04-16

KEV No

Patch Awaiting data

Package linux

Frequently asked questions

What is CVE-2005-2801?

CVE-2005-2801 is a High severity Linux kernel vulnerability with a CVSS score of 7.5 out of 10 . CVE-2005-2801 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2005-2801?

CVE-2005-2801 has a CVSS score of 7.5 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Is there a patch available for CVE-2005-2801?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2005-2801 patch availability.
Is CVE-2005-2801 actively exploited?

No. CVE-2005-2801 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.