CVE-2003-0018
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which...
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.
Exploit likelihood
What each source reports
NVD Score used
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.
- Record
CVE-2003-0018- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.
- Record
CVE-2003-0018- Updated
- 2026-11-02
EUVDEUVD-2003-0018 No score
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.
- Record
EUVD-2003-0018- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f89m-hrqp-rgf4 No score
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which...
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.
- Record
GHSA-f89m-hrqp-rgf4- Updated
- 2026-11-02
OSVBELL-CVE-2003-0018
CVE-2003-0018 does not affect BellSoft software
- Record
BELL-CVE-2003-0018- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.18Debian:3.0 |
before 2.4.18-11 | 2.4.18-11 |
kernel-image-2.4.18-1-i386Debian:3.0 |
before 2.4.18-9 | 2.4.18-9 |
kernel-image-2.4.18-i386bfDebian:3.0 |
before 2.4.18-5woody2, plus listed versions 2.4.18-5 |
2.4.18-5woody2 |
kernel-image-2.4.18-1-alphaDebian:3.0 |
before 2.4.18-8 | 2.4.18-8 |
kernel-image-2.4.17-ia64Debian:3.0 |
before kernel-image-2.4.17-ia64 | kernel-image-2.4.17-ia64 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0018 is a low vulnerability (CVSS 3.6) in Linux Kernel, published February 19, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in kernel-source-2.4.18 2.4.18-11.