Main Vulnerability Database Vulnerabilities #VU99741

Race condition in Linux kernel - CVE-2003-0462

Published: August 27, 2003 / Updated: November 5, 2024

Vulnerability identifier: #VU99741

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2003-0462

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local user to perform service disruption.

A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).

Affected software

Linux kernel

How to mitigate CVE-2003-0462

Install update from vendor's repository.

Links to Public Exploits and PoC-codes

Exploit #10803 - Linux Kernel 2.4 - SUID execve() System Call Race Condition Executable File Read (PoC) (November 5, 2024)

External References

Related Security Bulletins

Race condition in Linux kernel