First published: Fri Dec 31 2004(Updated: )
Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to read kernel memory and cause a denial of service (crash) via large offsets in sysfs files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux kernel | =2.6.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-2302 has a high severity rating due to its potential to allow local users to read kernel memory and cause denial of service.
Fixing CVE-2004-2302 requires upgrading to a version of the Linux kernel that is 2.6.10 or later, where this vulnerability is addressed.
The potential impacts of CVE-2004-2302 include unauthorized access to sensitive kernel memory and system crashes, leading to denial of service.
CVE-2004-2302 affects local users of systems running the Linux kernel prior to version 2.6.10.
There is no known effective workaround for CVE-2004-2302, and the best mitigation is to upgrade to a patched version of the Linux kernel.