CVE-2004-0814: Race Condition
Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0814?
CVE-2004-0814 is considered to have moderate severity due to potential local data exposure and the possibility of denial of service attacks.
How do I fix CVE-2004-0814?
To fix CVE-2004-0814, update the Linux kernel to version 2.6.9 or later, which contains patches addressing the vulnerability.
What versions of Linux are affected by CVE-2004-0814?
CVE-2004-0814 affects multiple versions of Linux 2.4.x and 2.6.x prior to version 2.6.9.
Can CVE-2004-0814 be exploited remotely?
Yes, CVE-2004-0814 can be exploited remotely to cause a denial of service, allowing attackers to initiate a kernel panic.
Are local users at risk with CVE-2004-0814?
Yes, local users can exploit CVE-2004-0814 to gain access to portions of kernel data through specific ioctl calls.