CVE-2004-1057: High severity Linux Linux kernel vulnerability
Published Jan 21, 2005
·Updated
Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VMIO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.
Affected Software
134 affected components
Linux Linux kernel=2.0.30
Linux Linux kernel=2.0.18
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.15
redhat Enterprise Linux=2.1
Linux Linux kernel=2.2.10
Linux Linux kernel=2.0.20
Linux Linux kernel=2.0.23
Linux Linux kernel=2.0.9.9
Linux Linux kernel=2.4.0-test1
redhat Enterprise Linux=4.0
Linux Linux kernel=2.0.27
Linux Linux kernel=2.2.21
Linux Linux kernel=2.4.11
Linux Linux kernel=2.4.18-pre3
Linux Linux kernel=2.0.31
Linux Linux kernel=2.0.24
Linux Linux kernel=2.4.18-pre5
Linux Linux kernel=2.2.13
redhat Enterprise Linux=4.0
Linux Linux kernel=2.0.9
Linux Linux kernel=2.0.37
Linux Linux kernel=2.2.0
Linux Linux kernel=2.4.0-test6
Linux Linux kernel=2.2.6
redhat Enterprise Linux=3.0
Linux Linux kernel=2.4.19-pre1
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.12
Linux Linux kernel=2.0.14
Linux Linux kernel=2.4.13
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.2.18
Linux Linux kernel=2.1
Linux Linux kernel=2.2.3
Linux Linux kernel=2.0.34
Linux Linux kernel=2.4.17
Linux Linux kernel=2.0.11
Linux Linux kernel=2.0.15
Linux Linux kernel=2.0.4
redhat Enterprise Linux=2.1
Linux Linux kernel=2.0.6
Linux Linux kernel=2.2.2
Linux Linux kernel=2.0.5
Linux Linux kernel=2.2.22
Linux Linux kernel=2.3.0
Linux Linux kernel=2.2.5
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.0.21
Linux Linux kernel=2.3.99-pre6
Linux Linux kernel=2.0.26
Linux Linux kernel=2.2.15-pre16
Linux Linux kernel=2.0.28
Linux Linux kernel=2.3.99
Linux Linux kernel=2.2.8
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.2.7
Linux Linux kernel=2.2.16
Linux Linux kernel=2.0
Linux Linux kernel=2.0.39
Linux Linux kernel=2.2.1
Linux Linux kernel=2.0.29
Linux Linux kernel=2.0.1
Linux Linux kernel=2.2.12
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.3.99-pre5
Linux Linux kernel=2.2.27-rc2
Linux Linux kernel=2.0.32
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.10
Linux Linux kernel=2.2.25
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.16
Linux Linux kernel=2.2.23
Linux Linux kernel=2.0.2
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.14
Linux Linux kernel=2.0.36
Linux Linux kernel=2.0.13
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.2.19
Linux Linux kernel=2.4.18
Linux Linux kernel=2.0.17
Linux Linux kernel=2.0.7
redhat Enterprise Linux=4.0
Linux Linux kernel=2.4.19-pre5
redhat Enterprise Linux=3.0
Linux Linux kernel=2.1.89
Linux Linux kernel=2.0.16
Linux Linux kernel=2.2.15_pre20
Linux Linux kernel=2.2.20
Linux Linux kernel=2.4.0-test5
redhat Enterprise Linux=2.1
Linux Linux kernel=2.2.15
Linux Linux kernel=2.3.99-pre4
Linux Linux kernel=2.3.99-pre3
Linux Linux kernel=2.4.18
Linux Linux kernel=2.0.10
Linux Linux kernel=2.0.22
Linux Linux kernel=2.2.4
Linux Linux kernel=2.6.20.1
Linux Linux kernel=2.2.14
Linux Linux kernel<=2.4.19
redhat Enterprise Linux=3.0
Linux Linux kernel=2.0.38
Linux Linux kernel=2.2.11
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.1
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.0.33
Linux Linux kernel=2.0.3
Linux Linux kernel=2.2.24
Linux Linux kernel=2.2.16-pre6
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.3.99-pre2
Linux Linux kernel=2.2.17
Linux Linux kernel=2.0.8
Linux Linux kernel=2.4.0-test11
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.0.25
Linux Linux kernel=2.2.9
Linux Linux kernel=2.0.12
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.3.99-pre1
Linux Linux kernel=2.4.18-pre7
Linux Linux kernel=2.0.35
redhat Enterprise Linux=2.1
Linux Linux kernel=2.3.99-pre7
Linux Linux kernel=2.0.19
Remediation
Patch Available
Patch Available
Event History
Jan 21, 2005
CVE Published
05:00 AM
Jan 29, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1057?
CVE-2004-1057 is classified as a moderate vulnerability due to the potential impact of a denial of service through kernel panic.
2
Which Linux kernel versions are affected by CVE-2004-1057?
CVE-2004-1057 affects Linux kernel versions 2.4.19 and earlier, as well as multiple versions from 2.0.
3
How do I fix CVE-2004-1057?
To fix CVE-2004-1057, you should upgrade to a fixed version of the Linux kernel, preferably one later than 2.4.19.
4
What kind of attacks can exploit CVE-2004-1057?
CVE-2004-1057 can be exploited to cause a denial of service, leading to a kernel panic when accessing freed kernel pages.
5
Are there any workarounds for CVE-2004-1057?
While the best approach is to upgrade the Linux kernel, administrative monitoring may help detect unusual behavior prior to kernel panic.