CVE-2005-2098

CVE-2005-2098 describes a denial-of-service vulnerability in the Linux kernel, specifically affecting versions prior to 2.6.12.5. The flaw lies in the KEYCTL_JOIN_SESSION_KEYRING operation, where an error path fails to properly release a session management semaphore. This can be triggered by local or remote attackers using various malformed session keyring requests. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is remotely exploitable with low attack complexity, and its primary impact is a denial of service (semaphore hang). There is no confidentiality or integrity impact. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public attention.