CVE-2004-0427: Low severity Linux Linux kernel vulnerability
The dofork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mmcount counter when an error occurs after the mmstruct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONEVM) system call.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0427?
CVE-2004-0427 is considered a high severity vulnerability due to the potential for local users to exploit it for denial of service.
How do I fix CVE-2004-0427?
To fix CVE-2004-0427, upgrade the Linux kernel to version 2.4.26 or 2.6.6 or later.
What causes CVE-2004-0427?
CVE-2004-0427 is caused by a flaw in the do_fork function that improperly manages the mm_count counter leading to memory leaks.
Which Linux kernel versions are affected by CVE-2004-0427?
CVE-2004-0427 affects Linux kernel versions 2.4.x before 2.4.26 and 2.6.x before 2.6.6.
Can CVE-2004-0427 be exploited remotely?
CVE-2004-0427 cannot be exploited remotely as it requires local user access to the system.