Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2004-0427 | Mondoo Vulnerability Intelligence

CVE-2004-0427

UNKNOWN

The do_fork function in Linux 2

Published Apr 30, 2004

Modified 1 years ago

No fix available

Details

The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.

References

ADVISORYftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc ADVISORYftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc ADVISORYhttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 ADVISORYhttp://fedoranews.org/updates/FEDORA-2004-111.shtml WEBhttp://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA WEBhttp://linux.bkbits.net:8080/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A WEBhttp://marc.info/?l=linux-kernel&m=108139073506983&w=2 ADVISORYhttp://secunia.com/advisories/11429 ADVISORYhttp://secunia.com/advisories/11464 ADVISORYhttp://secunia.com/advisories/11486 ADVISORYhttp://secunia.com/advisories/11541 ADVISORYhttp://secunia.com/advisories/11861 ADVISORYhttp://secunia.com/advisories/11891 ADVISORYhttp://secunia.com/advisories/11892 ADVISORYhttp://secunia.com/advisories/20162 ADVISORYhttp://secunia.com/advisories/20163 ADVISORYhttp://secunia.com/advisories/20202 ADVISORYhttp://secunia.com/advisories/20338 ADVISORYhttp://security.gentoo.org/glsa/glsa-200407-02.xml ADVISORYhttp://www.ciac.org/ciac/bulletins/o-164.shtml ADVISORYhttp://www.debian.org/security/2006/dsa-1067 ADVISORYhttp://www.debian.org/security/2006/dsa-1069 ADVISORYhttp://www.debian.org/security/2006/dsa-1070 ADVISORYhttp://www.debian.org/security/2006/dsa-1082 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2004:037 ADVISORYhttp://www.novell.com/linux/security/advisories/2004_10_kernel.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2004-255.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2004-260.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2004-327.html WEBhttp://www.securityfocus.com/bid/10221 ADVISORYhttp://www.turbolinux.com/security/2004/TLSA-2004-14.txt WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16002 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10297 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2819 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2004-0427

CVSS Analysis

CVSS v2.0

2.1

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

PartialA:P

2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P

Ecosystems

Timeline

PublishedApr 30, 2004

ModifiedAug 8, 2024