CVE-2004-0427
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly...
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
Exploit likelihood
What each source reports
NVD Score used
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
- Record
CVE-2004-0427- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-401
- Updated
- 2026-11-02
CVE List No score
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
- Record
CVE-2004-0427- Updated
- 2026-11-02
EUVDEUVD-2004-0426 No score
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
- Record
EUVD-2004-0426- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6336-xxrx-mvmh No score
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly...
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
- Record
GHSA-6336-xxrx-mvmh- Updated
- 2026-11-02
OSVBELL-CVE-2004-0427
CVE-2004-0427 does not affect BellSoft software
- Record
BELL-CVE-2004-0427- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.16Debian:3.0 |
before 2.4.16-1woody2 | 2.4.16-1woody2 |
kernel-source-2.4.18Debian:3.0 |
before 2.4.18-14.4, plus listed versions 2.4.18-14.3 |
2.4.18-14.4 |
kernel-image-sparc-2.4Debian:3.0 |
before 26woody1, plus listed versions 26 |
26woody1 |
kernel-patch-2.4.19-mipsDebian:3.0 |
before 2.4.19-0.020911.1.woody5, plus listed versions 2.4.19-0.020911.1.woody4 |
2.4.19-0.020911.1.woody5 |
kernel-source-2.4.19Debian:3.0 |
before 2.4.19-4.woody3, plus listed versions 2.4.19-4.woody2 |
2.4.19-4.woody3 |
kernel-source-2.4.17Debian:3.0 |
before 2.4.17-1woody4, plus listed versions 2.4.17-1woody3 |
2.4.17-1woody4 |
kernelRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-docRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-hugememRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-smpRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-sourceRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernelRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-docRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernelRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-docRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-smpRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-sourceRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernelRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-docRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-smpRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.0.2.EL | 0:2.4.21-15.0.2.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0427 is a low vulnerability (CVSS 2.1) in Linux Kernel, published April 30, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in kernel-source-2.4.16 2.4.16-1woody2.
References
secunia.com/advisories/20163
redhat.com/support/errata/RHSA-2004-327.html
linux.bkbits.net/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A
exchange.xforce.ibmcloud.com/vulnerabilities/16002
debian.org/security/2006/dsa-1082
Show 49 moreShow less
fedoranews.org/updates/FEDORA-2004-111.shtml
marc.info?l=linux-kernel&m=108139073506983&w=2
novell.com/linux/security/advisories/2004_10_kernel.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10297
mandriva.com/security/advisories?name=MDKSA-2004:037
turbolinux.com/security/2004/TLSA-2004-14.txt
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000846
securityfocus.com/bid/10221
ciac.org/ciac/bulletins/o-164.shtml
security.gentoo.org/glsa/glsa-200407-02.xml
nvd.nist.gov/vuln/detail/CVE-2004-0427
github.com/advisories/GHSA-6336-xxrx-mvmh
docs.bell-sw.com/security/cves/CVE-2004-0427
access.redhat.com/errata/RHSA-2004:255
bugzilla.redhat.com/show_bug.cgi?id=125794
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_255.json
cve.org/CVERecord?id=CVE-2004-0427