7.2

CVE-2003-0127: linux linux_kernel

Modified
AliasesDSA-270DSA-276
Published 18-03-2003Last modified 08-08-2024
Some data may be incomplete
  • 1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2003-0127 is a high (CVSS 7.2) vulnerability in linux linux_kernel. EPSS estimates a 1.57% chance of exploitation in the next 30 days, higher than 75.4% of scored vulnerabilities. 4 public exploits are recorded.

Priority
Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 14-04-2003)

Source freshness unavailable

How is this decided?
CVSS score
7.2/10
010
High · v2.0 (NVD)
EPSS score
1.57%
0%100%
Low · -0.01 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits4exploit-database

Advisory lineage

Upstream 0 · Downstream 6
DSA-311DSA-312DSA-332DSA-336DSA-423DSA-495

Timeline

  1. 18-03-2003
    PublishedVulnerability first disclosed.
  2. 08-08-2024
    Last modifiedVulnerability information updated.

Description

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.57%

Chance of exploitation in the next 30 days

Percentile

75%

Versus all other CVEs

30-day change

Decrease -0.01 pp

From 1.58% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

4 found
  • exploit-databaselocallinuxVerified

    Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation

    Maturity: weaponized

  • exploit-databaselocallinuxVerified

    Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (1)

    Maturity: weaponized

  • exploit-databaselocallinuxVerified

    Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (2)

    Maturity: weaponized

Show all 4 exploits
  • exploit-databaselocallinuxVerified

    Linux Kernel < 2.4.20 - Module Loader Privilege Escalation

    Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Debian4 products
  • kernel-image-2.4.17-s390< 2.4.17-2.woody.2.2
  • kernel-patch-2.4.17-mips< 2.4.17-0.020226.2.woody1
  • kernel-patch-2.4.17-s390< 0.0.20020816-0.woody.1.1
  • kernel-patch-2.4.19-mips< 2.4.19-0.020911.1.woody1
Linux1 product
  • linux_kernel2.2.0 | 2.2.1 | 2.2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.6 | 2.2.7 | 2.2.8 | 2.2.9 | 2.2.10 | 2.2.11 | 2.2.12 | 2.2.13 | 2.2.14 | 2.2.15 | 2.2.16 | 2.2.17 | 2.2.18 | 2.2.19 | 2.2.20 | 2.2.21 | 2.2.22 | 2.2.23 | 2.2.24 | 2.4.0 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.5 | 2.4.6 | 2.4.7 | 2.4.8 | 2.4.9 | 2.4.10 | 2.4.11 | 2.4.12 | 2.4.13 | 2.4.14 | 2.4.15 | 2.4.16 | 2.4.17 | 2.4.18 | 2.4.19 | 2.4.20 | 2.4.21:pre1

2 vendors · 5 products

References

19 links
Show all 19 references