CVE-2004-0077
Fixed in a distro release EPSS 2%
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
Products: redhat bigmem_kernel, redhat kernel, redhat kernel_doc, redhat kernel_source, linux_kernel, netwosix_linux, trustix secure_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | kernel-image-2.2.10-powerpc-apus | 2.2.10-13woody1 |
| Debian 3.0 | kernel-image-2.2.19-netwinder | 20040303 |
| Debian 3.0 | kernel-image-2.2.19-riscpc | 20040303 |
| Debian 3.0 | kernel-image-2.2.20-amiga | 2.20-4 |
| Debian 3.0 | kernel-image-2.2.20-atari | 2.2.20-3 |
| Debian 3.0 | kernel-image-2.2.20-bvme6000 | 2.2.20-3 |
| Debian 3.0 | kernel-image-2.2.20-i386 | 2.2.20-5woody5 |
| Debian 3.0 | kernel-image-2.2.20-mac | 2.2.20-3 |
| Debian 3.0 | kernel-image-2.2.20-mvme147 | 2.2.20-3 |
| Debian 3.0 | kernel-image-2.2.20-mvme16x | 2.2.20-3 |
| Debian 3.0 | kernel-image-2.2.20-reiserfs-i386 | 2.2.20-4woody1 |
| Debian 3.0 | kernel-image-2.2.22-alpha | 2.2.22-2 |
| Debian 3.0 | kernel-image-2.4.16-lart | 2.4.16-20040204 |
| Debian 3.0 | kernel-image-2.4.16-netwinder | 2.4.16-20040204 |
| Debian 3.0 | kernel-image-2.4.16-riscpc | 2.4.16-20040204 |
| Debian 3.0 | kernel-image-2.4.17-hppa | 32.3 |
| Debian 3.0 | kernel-image-2.4.17-ia64 | 011226.16 |
| Debian 3.0 | kernel-image-2.4.17-s390 | 2.4.17-2.woody.3 |
| Debian 3.0 | kernel-image-2.4.18-1-alpha | 2.4.18-14 |
| Debian 3.0 | kernel-image-2.4.18-1-i386 | 2.4.18-12.2 |
| Debian 3.0 | kernel-image-2.4.18-hppa | 62.1 |
| Debian 3.0 | kernel-image-2.4.18-i386bf | 2.4.18-5woody7 |
| Debian 3.0 | kernel-patch-2.2.19-arm | 20040303 |
| Debian 3.0 | kernel-patch-2.2.20-powerpc | 2.2.20-3woody1 |
| Debian 3.0 | kernel-patch-2.4.16-arm | 20040204 |
| Debian 3.0 | kernel-patch-2.4.17-apus | 2.4.17-4 |
| Debian 3.0 | kernel-patch-2.4.17-mips | 2.4.17-0.020226.2.woody5 |
| Debian 3.0 | kernel-patch-2.4.17-s390 | 0.0.20020816-0.woody.2 |
| Debian 3.0 | kernel-patch-2.4.18-powerpc | 2.4.18-1woody4 |
| Debian 3.0 | kernel-patch-2.4.19-mips | 2.4.19-4.woody1 |
| Debian 3.0 | kernel-source-2.2.10 | 2.2.10-2 |
| Debian 3.0 | kernel-source-2.2.19 | 2.2.19.1-4woody1 |
| Debian 3.0 | kernel-source-2.2.20 | 2.2.20-5woody3 |
| Debian 3.0 | kernel-source-2.2.22 | 2.2.22-1woody1 |
| Debian 3.0 | kernel-source-2.4.17 | 2.4.17-4 |
| Debian 3.0 | kernel-source-2.4.18 | 2.4.18-14.2 |
| Debian 3.0 | kernel-source-2.4.19 | 2.4.19-0.020911.1.woody3 |
| Red Hat Enterprise Linux 3 | kernel | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-BOOT | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-debuginfo | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-doc | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-hugemem | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-hugemem-unsupported | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-smp | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-smp-unsupported | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-source | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | kernel-unsupported | 0:2.4.21-9.0.1.EL |
| Red Hat Enterprise Linux 3 | s390utils | 2:1.2.4-3 |
| Red Hat Enterprise Linux 3 | s390utils-debuginfo | 2:1.2.4-3 |