CVE-2004-0077: linux linux_kernel

CVSS: 7.2v2.0HighModified

AliasesRHSA-2004:066DSA-438DSA-441+6 more

Published 01-09-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-0077 is a high (CVSS 7.2) vulnerability in linux linux_kernel. EPSS estimates a 2.43% chance of exploitation in the next 30 days, higher than 84% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

39/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.2/10

010

High · v2.0 (NVD)

EPSS score

2.43%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 6

DSA-439 DSA-440 DSA-442 DSA-450 DSA-470 DSA-475

Timeline

01-09-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.

CVSS metrics

1 score · 1 source · 1 version

v2.07.2

EPSS trend

Probability

2.43%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

0.00 pp

From 2.43% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.43%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocallinuxVerified
Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation
Maturity: weaponized
exploit-databaselocallinuxVerified
Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Validator
Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Debian25 products

kernel-image-2.2.10-powerpc-apus< 2.2.10-13woody1
kernel-image-2.2.19-netwinder< 20040303
kernel-image-2.2.19-riscpc< 20040303
kernel-image-2.2.20-amiga< 2.20-4
kernel-image-2.2.20-atari< 2.2.20-3

Show all 25

Redhat16 products

bigmem_kernel2.4.20-8
kernel2.4.20-8
kernel_doc2.4.20-8
kernel_source2.4.20-8
kernel< 0:2.4.21-9.0.1.EL

Show all 16

Linux1 product

linux_kernel2.2.0 | 2.2.1 | 2.2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.6 | 2.2.7 | 2.2.8 | 2.2.9 | 2.2.10 | 2.2.11 | 2.2.12 | 2.2.13 | 2.2.14 | 2.2.15 | 2.2.15:pre16 | 2.2.15_pre20 | 2.2.16 | 2.2.16:pre6 | 2.2.17 | 2.2.18 | 2.2.19 | 2.2.20 | 2.2.21 | 2.2.22 | 2.2.23 | 2.2.24 | 2.4.0 | 2.4.0:test1 | 2.4.0:test10 | 2.4.0:test11 | 2.4.0:test12 | 2.4.0:test2 | 2.4.0:test3 | 2.4.0:test4 | 2.4.0:test5 | 2.4.0:test6 | 2.4.0:test7 | 2.4.0:test8 | 2.4.0:test9 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.5 | 2.4.6 | 2.4.7 | 2.4.8 | 2.4.9 | 2.4.10 | 2.4.11 | 2.4.12 | 2.4.13 | 2.4.14 | 2.4.15 | 2.4.16 | 2.4.17 | 2.4.18 | 2.4.18:pre1 | 2.4.18:pre2 | 2.4.18:pre3 | 2.4.18:pre4 | 2.4.18:pre5 | 2.4.18:pre6 | 2.4.18:pre7 | 2.4.18:pre8 | 2.4.19 | 2.4.19:pre1 | 2.4.19:pre2 | 2.4.19:pre3 | 2.4.19:pre4 | 2.4.19:pre5 | 2.4.19:pre6 | 2.4.20 | 2.4.21 | 2.4.21:pre1 | 2.4.21:pre4 | 2.4.21:pre7 | 2.4.22 | 2.4.23 | 2.4.23:pre9 | 2.4.24 | 2.6.0 | 2.6.0:test1 | 2.6.0:test10 | 2.6.0:test11 | 2.6.0:test2 | 2.6.0:test3 | 2.6.0:test4 | 2.6.0:test5 | 2.6.0:test6 | 2.6.0:test7 | 2.6.0:test8 | 2.6.0:test9 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.2 | 2.6_test9_cvs

Netwosix1 product