medium
4.9
CWE
NVD-CWE-Other
Advisory Published
CVE Published
Updated

CVE-2004-2660

First published: Fri Dec 31 2004(Updated: )

Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory consumption) via certain O_DIRECT (direct IO) write requests.

Credit: cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Linux Kernel=2.6.0
Linux Kernel=2.6.0
Linux Kernel=2.6.0
Linux Kernel=2.6.0-test1
Linux Kernel=2.6.0-test10
Linux Kernel=2.6.0-test11
Linux Kernel=2.6.0-test2
Linux Kernel=2.6.0-test3
Linux Kernel=2.6.0-test4
Linux Kernel=2.6.0-test5
Linux Kernel=2.6.0-test6
Linux Kernel=2.6.0-test7
Linux Kernel=2.6.0-test8
Linux Kernel=2.6.0-test9
Linux Kernel=2.6.1
Linux Kernel=2.6.1-rc1
Linux Kernel=2.6.1-rc2
Linux Kernel=2.6.1-rc3
Linux Kernel=2.6.2
Linux Kernel=2.6.2-rc1
Linux Kernel=2.6.2-rc2
Linux Kernel=2.6.2-rc3
Linux Kernel=2.6.3
Linux Kernel=2.6.3-rc1
Linux Kernel=2.6.3-rc2
Linux Kernel=2.6.3-rc3
Linux Kernel=2.6.3-rc4
Linux Kernel=2.6.4
Linux Kernel=2.6.4-rc1
Linux Kernel=2.6.4-rc2
Linux Kernel=2.6.4-rc3
Linux Kernel=2.6.5
Linux Kernel=2.6.5-rc1
Linux Kernel=2.6.5-rc2
Linux Kernel=2.6.5-rc3
Linux Kernel=2.6.6
Linux Kernel=2.6.6-rc1
Linux Kernel=2.6.6-rc2
Linux Kernel=2.6.6-rc3
Linux Kernel=2.6.7
Linux Kernel=2.6.7-rc1
Linux Kernel=2.6.7-rc2
Linux Kernel=2.6.7-rc3
Linux Kernel=2.6.8
Linux Kernel=2.6.8-rc1
Linux Kernel=2.6.8-rc2
Linux Kernel=2.6.8-rc3
Linux Kernel=2.6.8-rc4
Linux Kernel=2.6.8.1
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.8.1.5
Linux Kernel=2.6.9
Linux Kernel=2.6.9-2.6.20
Linux Kernel=2.6.9-rc1
Linux Kernel=2.6.9-rc2
Linux Kernel=2.6.9-rc3
Linux Kernel=2.6.9-rc4
Linux Kernel=2.6_test9_cvs

Remedy

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.10

Remedy

http://linux.bkbits.net:8080/linux-2.6/cset@4182a613oVsK0-8eCWpyYFrUf8rhLA

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2004-2660?

    CVE-2004-2660 is classified as a denial of service vulnerability due to a memory leak in the Linux kernel.

  • Who is affected by CVE-2004-2660?

    CVE-2004-2660 affects local users of Linux kernel versions 2.6.x before 2.6.10.

  • How do I fix CVE-2004-2660?

    To fix CVE-2004-2660, upgrade the Linux kernel to version 2.6.10 or later.

  • What causes CVE-2004-2660?

    CVE-2004-2660 is caused by certain O_DIRECT write requests that lead to memory consumption.

  • Can CVE-2004-2660 be exploited remotely?

    CVE-2004-2660 requires local access to the affected system to exploit, making it a local privilege escalation issue.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203