CVE-2004-1068: Race Condition
Published Dec 1, 2004
·Updated
A "missing serialization" error in the unixdgramrecvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
Affected Software
79 affected components
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.15
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.0-test1
redhat Enterprise Linux Desktop=3.0
Linux Linux kernel=2.4.27-pre3
Linux Linux kernel=2.4.18-pre3
Ubuntu Ubuntu Linux=4.1
Linux Linux kernel=2.4.18-pre5
redhat Linux Advanced Workstation=2.1
Linux Linux kernel=2.4.26
Linux Linux kernel=2.4.0-test6
Linux Linux kernel=2.4.19-pre1
redhat Enterprise Linux=3.0
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.27-pre2
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.4.17
Linux Linux kernel=2.4.21-pre1
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.23_ow2
Linux Linux kernel=2.4.23
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.7
Linux Linux kernel=2.4.25
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.24
Linux Linux kernel=2.4.9
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.4.24_ow1
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.27-pre5
Linux Linux kernel=2.4.14
redhat Linux Advanced Workstation=2.1
Linux Linux kernel=2.4.27-pre1
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.19-pre5
redhat Enterprise Linux=3.0
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.5
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.27-pre4
Linux Linux kernel=2.4.3
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.1
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.4.27
Linux Linux kernel=2.4.0-test11
Linux Linux kernel=2.4.6
Ubuntu Ubuntu Linux=4.1
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.4.18-pre7
redhat Enterprise Linux=2.1
redhat Enterprise Linux=3.0
Remediation
Patch Available
Event History
Dec 1, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1068?
CVE-2004-1068 has a high severity rating due to the potential for local users to gain elevated privileges.
2
How do I fix CVE-2004-1068?
To fix CVE-2004-1068, upgrade your Linux kernel to version 2.4.28 or later.
3
Which systems are affected by CVE-2004-1068?
CVE-2004-1068 affects Linux kernel versions 2.4.27 and earlier, as well as versions from 2.6.x up to 2.6.9.
4
What type of vulnerability is CVE-2004-1068?
CVE-2004-1068 is a privilege escalation vulnerability caused by a missing serialization in the unix_dgram_recvmsg function.
5
Can CVE-2004-1068 be exploited remotely?
CVE-2004-1068 cannot be exploited remotely; it requires local user access to the affected system.