CVE-2004-0491
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock...
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.
Exploit likelihood
What each source reports
NVD Score used
2.1
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.
- Record
CVE-2004-0491- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.
- Record
CVE-2004-0491- Updated
- 2026-11-02
EUVDEUVD-2004-0490 No score
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.
- Record
EUVD-2004-0490- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f79w-jc47-24f4 No score
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock...
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.
- Record
GHSA-f79w-jc47-24f4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
Show 30 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernelRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernelRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.4.21-32.0.1.EL | 0:2.4.21-32.0.1.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0491 is a low vulnerability (CVSS 2.1) in Redhat Enterprise Linux, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10672
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1117
secunia.com/advisories/19607
redhat.com/support/errata/RHSA-2005-472.html
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126411
marc.info?l=linux-kernel&m=108087017610947&w=2
Show 25 moreShow less
securityfocus.com/bid/13769
nvd.nist.gov/vuln/detail/CVE-2004-0491
github.com/advisories/GHSA-f79w-jc47-24f4
access.redhat.com/errata/RHSA-2005:472
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=126411
bugzilla.redhat.com/show_bug.cgi?id=141394
bugzilla.redhat.com/show_bug.cgi?id=141905
bugzilla.redhat.com/show_bug.cgi?id=142802
bugzilla.redhat.com/show_bug.cgi?id=149087
bugzilla.redhat.com/show_bug.cgi?id=151865
bugzilla.redhat.com/show_bug.cgi?id=156023
bugzilla.redhat.com/show_bug.cgi?id=157451
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_472.json
access.redhat.com/security/cve/CVE-2004-0491
bugzilla.redhat.com/show_bug.cgi?id=1617210
cve.org/CVERecord?id=CVE-2004-0491
access.redhat.com/security/cve/CVE-2005-0176
bugzilla.redhat.com/show_bug.cgi?id=1617481
cve.org/CVERecord?id=CVE-2005-0176
nvd.nist.gov/vuln/detail/CVE-2005-0176
access.redhat.com/security/cve/CVE-2005-1263
bugzilla.redhat.com/show_bug.cgi?id=1617620
cve.org/CVERecord?id=CVE-2005-1263
nvd.nist.gov/vuln/detail/CVE-2005-1263