CVE-2004-1058
Race condition in Linux kernel 2.6 allows local users to read the environment variables of...
CVE-2004-1058 is a low vulnerability (CVSS 1.2) in Linux Kernel, published December 22, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in kernel-source-2.4.27 2.4.27-10sarge2.
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
Exploit likelihood
What each source reports
NVD Score used
1.2
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
- Record
CVE-2004-1058- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
- Record
CVE-2004-1058- Updated
- 2026-11-02
EUVDEUVD-2004-1056 No score
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
- Record
EUVD-2004-1056- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m29m-89vm-949f No score
Race condition in Linux kernel 2.6 allows local users to read the environment variables of...
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
- Record
GHSA-m29m-89vm-949f- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.27Debian:3.1 |
before 2.4.27-10sarge2, plus listed versions 2.4.27-102.4.27-10sarge1 |
2.4.27-10sarge2 |
kernelRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
Show 31 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/18684
secunia.com/advisories/19038
mandriva.com/security/advisories?name=MDKSA-2005:022
exchange.xforce.ibmcloud.com/vulnerabilities/17151
secunia.com/advisories/19369
secunia.com/advisories/21476
Show 91 moreShow less
securityfocus.com/bid/11937
debian.org/security/2006/dsa-1018
securityfocus.com/bid/11052
gentoo.org/security/en/glsa/glsa-200408-24.xml
secunia.com/advisories/19607
redhat.com/support/errata/RHSA-2006-0190.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10427
lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html
usn.ubuntu.com/38-1
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532
redhat.com/support/errata/RHSA-2005-293.html
redhat.com/support/errata/RHSA-2006-0191.html
nvd.nist.gov/vuln/detail/CVE-2004-1058
github.com/advisories/GHSA-m29m-89vm-949f
access.redhat.com/errata/RHSA-2005:293
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=121032
bugzilla.redhat.com/show_bug.cgi?id=126407
bugzilla.redhat.com/show_bug.cgi?id=130774
bugzilla.redhat.com/show_bug.cgi?id=131674
bugzilla.redhat.com/show_bug.cgi?id=133108
bugzilla.redhat.com/show_bug.cgi?id=133113
bugzilla.redhat.com/show_bug.cgi?id=144059
bugzilla.redhat.com/show_bug.cgi?id=144530
bugzilla.redhat.com/show_bug.cgi?id=147969
bugzilla.redhat.com/show_bug.cgi?id=148855
bugzilla.redhat.com/show_bug.cgi?id=148869
bugzilla.redhat.com/show_bug.cgi?id=150334
bugzilla.redhat.com/show_bug.cgi?id=151086
bugzilla.redhat.com/show_bug.cgi?id=151241
bugzilla.redhat.com/show_bug.cgi?id=151805
bugzilla.redhat.com/show_bug.cgi?id=152178
bugzilla.redhat.com/show_bug.cgi?id=152411
bugzilla.redhat.com/show_bug.cgi?id=152552
bugzilla.redhat.com/show_bug.cgi?id=155234
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_293.json
access.redhat.com/security/cve/CVE-2004-0075
bugzilla.redhat.com/show_bug.cgi?id=1617137
cve.org/CVERecord?id=CVE-2004-0075
nvd.nist.gov/vuln/detail/CVE-2004-0075
access.redhat.com/security/cve/CVE-2004-0177
bugzilla.redhat.com/show_bug.cgi?id=1617168
cve.org/CVERecord?id=CVE-2004-0177
nvd.nist.gov/vuln/detail/CVE-2004-0177
access.redhat.com/security/cve/CVE-2004-0814
bugzilla.redhat.com/show_bug.cgi?id=1617302
cve.org/CVERecord?id=CVE-2004-0814
nvd.nist.gov/vuln/detail/CVE-2004-0814
access.redhat.com/security/cve/CVE-2004-1058
bugzilla.redhat.com/show_bug.cgi?id=1617360
cve.org/CVERecord?id=CVE-2004-1058
access.redhat.com/security/cve/CVE-2004-1073
bugzilla.redhat.com/show_bug.cgi?id=1617366
cve.org/CVERecord?id=CVE-2004-1073
nvd.nist.gov/vuln/detail/CVE-2004-1073
access.redhat.com/security/cve/CVE-2005-0135
bugzilla.redhat.com/show_bug.cgi?id=1617465
cve.org/CVERecord?id=CVE-2005-0135
nvd.nist.gov/vuln/detail/CVE-2005-0135
access.redhat.com/security/cve/CVE-2005-0137
bugzilla.redhat.com/show_bug.cgi?id=1617467
cve.org/CVERecord?id=CVE-2005-0137
nvd.nist.gov/vuln/detail/CVE-2005-0137
access.redhat.com/security/cve/CVE-2005-0204
bugzilla.redhat.com/show_bug.cgi?id=1617491
cve.org/CVERecord?id=CVE-2005-0204
nvd.nist.gov/vuln/detail/CVE-2005-0204
access.redhat.com/security/cve/CVE-2005-0384
bugzilla.redhat.com/show_bug.cgi?id=1617513
cve.org/CVERecord?id=CVE-2005-0384
nvd.nist.gov/vuln/detail/CVE-2005-0384
access.redhat.com/security/cve/CVE-2005-0403
bugzilla.redhat.com/show_bug.cgi?id=1617522
cve.org/CVERecord?id=CVE-2005-0403
nvd.nist.gov/vuln/detail/CVE-2005-0403
access.redhat.com/security/cve/CVE-2005-0449
bugzilla.redhat.com/show_bug.cgi?id=1617525
cve.org/CVERecord?id=CVE-2005-0449
nvd.nist.gov/vuln/detail/CVE-2005-0449
access.redhat.com/security/cve/CVE-2005-0736
bugzilla.redhat.com/show_bug.cgi?id=1617564
cve.org/CVERecord?id=CVE-2005-0736
nvd.nist.gov/vuln/detail/CVE-2005-0736
access.redhat.com/security/cve/CVE-2005-0749
bugzilla.redhat.com/show_bug.cgi?id=1617566
cve.org/CVERecord?id=CVE-2005-0749
nvd.nist.gov/vuln/detail/CVE-2005-0749
access.redhat.com/security/cve/CVE-2005-0750
bugzilla.redhat.com/show_bug.cgi?id=1617567
cve.org/CVERecord?id=CVE-2005-0750
nvd.nist.gov/vuln/detail/CVE-2005-0750