CVE-2004-0685: linux linux_kernel

Modified

Published 26-10-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-0685 is a medium (CVSS 4.6) vulnerability in linux linux_kernel. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 41.2% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.6, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.6/10

010

Medium · v2.0 (NVD)

EPSS score

0.48%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5

DSA-1067-1 DSA-1069-1 DSA-1070-1 DSA-1082-1 RHSA-2004:549

Timeline

26-10-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.

CVSS metrics

1 score · 1 source · 1 version

v2.04.6

EPSS trend

Probability

0.48%

Chance of exploitation in the next 30 days

Percentile

41%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.48% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat2 products

Linux1 product

linux_kernel2.2.0 | 2.2.1 | 2.2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.6 | 2.2.7 | 2.2.8 | 2.2.9 | 2.2.10 | 2.2.11 | 2.2.12 | 2.2.13 | 2.2.14 | 2.2.15 | 2.2.15:pre16 | 2.2.15_pre20 | 2.2.16 | 2.2.16:pre6 | 2.2.17 | 2.2.18 | 2.2.19 | 2.2.20 | 2.2.21 | 2.2.22 | 2.2.23 | 2.2.24 | 2.2.25 | 2.3.0 | 2.3.99 | 2.3.99:pre1 | 2.3.99:pre2 | 2.3.99:pre3 | 2.3.99:pre4 | 2.3.99:pre5 | 2.3.99:pre6 | 2.3.99:pre7 | 2.4.0 | 2.4.0:test1 | 2.4.0:test10 | 2.4.0:test11 | 2.4.0:test12 | 2.4.0:test2 | 2.4.0:test3 | 2.4.0:test4 | 2.4.0:test5 | 2.4.0:test6 | 2.4.0:test7 | 2.4.0:test8 | 2.4.0:test9 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.5 | 2.4.6 | 2.4.7 | 2.4.8 | 2.4.9 | 2.4.10 | 2.4.11 | 2.4.12 | 2.4.13 | 2.4.14 | 2.4.15 | 2.4.16 | 2.4.17 | 2.4.18 | 2.4.18:pre1 | 2.4.18:pre2 | 2.4.18:pre3 | 2.4.18:pre4 | 2.4.18:pre5 | 2.4.18:pre6 | 2.4.18:pre7 | 2.4.18:pre8 | 2.4.19 | 2.4.19:pre1 | 2.4.19:pre2 | 2.4.19:pre3 | 2.4.19:pre4 | 2.4.19:pre5 | 2.4.19:pre6 | 2.4.20 | 2.4.21 | 2.4.21:pre1 | 2.4.21:pre4 | 2.4.21:pre7 | 2.4.22 | 2.4.23 | 2.4.23:pre9 | 2.4.23_ow2 | 2.4.24 | 2.4.24_ow1 | 2.4.25 | 2.4.26 | 2.4.27:pre1 | 2.4.27:pre2 | 2.4.27:pre3 | 2.4.27:pre4 | 2.4.27:pre5 | 2.5.0 | 2.5.1 | 2.5.2 | 2.5.3 | 2.5.4 | 2.5.5 | 2.5.6 | 2.5.7 | 2.5.8 | 2.5.9 | 2.5.10 | 2.5.11 | 2.5.12 | 2.5.13 | 2.5.14 | 2.5.15 | 2.5.16 | 2.5.17 | 2.5.18 | 2.5.19 | 2.5.20 | 2.5.21 | 2.5.22 | 2.5.23 | 2.5.24 | 2.5.25 | 2.5.26 | 2.5.27 | 2.5.28 | 2.5.29 | 2.5.30 | 2.5.31 | 2.5.32 | 2.5.33 | 2.5.34 | 2.5.35 | 2.5.36 | 2.5.37 | 2.5.38 | 2.5.39 | 2.5.40 | 2.5.41 | 2.5.42 | 2.5.43 | 2.5.44 | 2.5.45 | 2.5.46 | 2.5.47 | 2.5.48 | 2.5.49 | 2.5.50 | 2.5.51 | 2.5.52 | 2.5.53 | 2.5.54 | 2.5.55 | 2.5.56 | 2.5.57 | 2.5.58 | 2.5.59 | 2.5.60 | 2.5.61 | 2.5.62 | 2.5.63 | 2.5.64 | 2.5.65 | 2.5.66 | 2.5.67 | 2.5.68 | 2.5.69 | 2.6.0 | 2.6.0:test1 | 2.6.0:test10 | 2.6.0:test11 | 2.6.0:test2 | 2.6.0:test3 | 2.6.0:test4 | 2.6.0:test5 | 2.6.0:test6 | 2.6.0:test7 | 2.6.0:test8 | 2.6.0:test9 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.6:rc1 | 2.6.7 | 2.6.7:rc1 | 2.6.8:rc1 | 2.6.8:rc2 | 2.6.8:rc3 | 2.6_test9_cvs

Trustix1 product