{"id":"CVE-2004-0077","aliases":["DEBIAN-CVE-2004-0077","DSA-438","DSA-439","DSA-440","DSA-441","DSA-442","DSA-444","DSA-450","DSA-453","DSA-454","DSA-456","DSA-466","DSA-470","DSA-475","DSA-514","EUVD-2004-0077","GHSA-pm7j-3492-hq9m","RHSA-2004:066"],"status":"published","title":"The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6...","description":"The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02454,"percentile":0.84511,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2004-02-18T00:00:00Z","modified":"2026-06-26T10:01:04Z","exploits":[{"source":"exploitdb","id":"EDB-154","title":"Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Validator","type":"local","platform":"linux","date":"2004-02-18","verified":true,"url":"https://www.exploit-db.com/exploits/154"},{"source":"exploitdb","id":"EDB-160","title":"Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation","type":"local","platform":"linux","date":"2004-03-01","verified":true,"url":"https://www.exploit-db.com/exploits/160"},{"source":"pocgithub","id":"0b0111100/2004","title":"0b0111100/2004","date":"2026-09-07","url":"https://github.com/0b0111100/2004"}],"fixes":[{"ecosystem":"Debian:3.0","package":"kernel-source-2.4.18","fixed_in":["2.4.18-14.2"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-1-alpha","fixed_in":["2.4.18-14"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-1-i386","fixed_in":["2.4.18-12.2"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-i386bf","fixed_in":["2.4.18-5woody7"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-patch-2.4.18-powerpc","fixed_in":["2.4.18-1woody4"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-patch-2.4.17-mips","fixed_in":["2.4.17-0.020226.2.woody5"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.4.17-ia64","fixed_in":["011226.16"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-source-2.2.20","fixed_in":["2.2.20-5woody3"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-i386","fixed_in":["2.2.20-5woody5"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-reiserfs-i386","fixed_in":["2.2.20-4woody1"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-amiga","fixed_in":["2.20-4"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-atari","fixed_in":["2.2.20-3"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-bvme6000","fixed_in":["2.2.20-3"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-mac","fixed_in":["2.2.20-3"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-mvme147","fixed_in":["2.2.20-3"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-mvme16x","fixed_in":["2.2.20-3"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-patch-2.2.20-powerpc","fixed_in":["2.2.20-3woody1"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-source-2.2.22","fixed_in":["2.2.22-1woody1"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.22-alpha","fixed_in":["2.2.22-2"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-source-2.2.19","fixed_in":["2.2.19.1-4woody1"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-patch-2.2.19-arm","fixed_in":["20040303"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.19-netwinder","fixed_in":["20040303"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.19-riscpc","fixed_in":["20040303"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-source-2.2.10","fixed_in":["2.2.10-2"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"kernel-image-2.2.10-powerpc-apus","fixed_in":["2.2.10-13woody1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-BOOT","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-debuginfo","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-doc","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-hugemem","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-hugemem-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-smp","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-smp-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-source","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"s390utils","fixed_in":["2:1.2.4-3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"s390utils-debuginfo","fixed_in":["2:1.2.4-3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-BOOT","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-debuginfo","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-doc","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-hugemem","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-hugemem-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-smp","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-smp-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-source","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-BOOT","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-debuginfo","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-doc","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-hugemem","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-hugemem-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-smp","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-smp-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-source","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-BOOT","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-debuginfo","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-doc","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-hugemem","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-hugemem-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-smp","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-smp-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-source","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-unsupported","fixed_in":["0:2.4.21-9.0.1.EL"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.4.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-14.2"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-1-alpha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-14"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-1-i386","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-12.2"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-i386bf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-5woody7"}]}],"versions":["2.4.18-5"]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-patch-2.4.18-powerpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-1woody4"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.16-lart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-20040204"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.16-netwinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-20040204"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.16-riscpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-20040204"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-patch-2.4.16-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20040204"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.4.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.17-4"}]}],"versions":["2.4.17-1woody3","2.4.17-1woody4"],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-patch-2.4.17-apus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.17-4"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-patch-2.4.17-mips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.17-0.020226.2.woody5"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-patch-2.4.17-s390","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20020816-0.woody.2"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.17-s390","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.17-2.woody.3"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.17-ia64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"011226.16"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.4.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.19-0.020911.1.woody3"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-patch-2.4.19-mips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.19-4.woody1"}]}],"versions":["2.4.19-0.020911.1.woody4","2.4.19-0.020911.1.woody5"],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.2.20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-5woody3"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-i386","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-5woody5"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-reiserfs-i386","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-4woody1"}]}],"versions":["2.2.20-4"]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-amiga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20-4"}]}],"versions":["2.2.20-4"]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-atari","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-bvme6000","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-mac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-mvme147","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.20-mvme16x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-patch-2.2.20-powerpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3woody1"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.2.22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.22-1woody1"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.22-alpha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.22-2"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.2.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19.1-4woody1"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-patch-2.2.19-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20040303"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.19-netwinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20040303"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.19-riscpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20040303"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.2.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-2"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.2.10-powerpc-apus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-13woody1"}]}],"versions":["2.2.10-13"]},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.17-hppa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-hppa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"62.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.2.20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-5woody3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-BOOT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-hugemem-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-smp-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"s390utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.4-3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"s390utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.4-3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-BOOT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-hugemem-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-smp-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-BOOT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-hugemem-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-smp-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-BOOT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-hugemem-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-smp-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-9.0.1.EL"}]}]}],"products":[{"vendor":"linux","product":"linux_kernel"},{"vendor":"netwosix","product":"netwosix_linux"},{"vendor":"redhat","product":"bigmem_kernel"},{"vendor":"redhat","product":"kernel"},{"vendor":"redhat","product":"kernel_doc"},{"vendor":"redhat","product":"kernel_source"},{"vendor":"trustix","product":"secure_linux"}],"references":[{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2004\u0026m=slackware-security.404734","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-450","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-440","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-069.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred"]},{"url":"http://fedoranews.org/updates/FEDORA-2004-079.shtml","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-439","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-475","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000820","tags":["vendor-advisory","x_refsource_CONECTIVA","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-442","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-470","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"]},{"url":"http://www.securityfocus.com/bid/9686","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-438","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-514","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-456","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A837","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-02.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-441","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-454","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15244","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=107711762014175\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-444","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-066.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=107755871932680\u0026w=2","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A825","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-453","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.osvdb.org/3986","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/981222","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.debian.org/security/2004/dsa-466","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=107712137732553\u0026w=2","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0077","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pm7j-3492-hq9m"},{"url":"https://access.redhat.com/errata/RHSA-2004:066","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www10.software.ibm.com/developerworks/opensource/linux390/s390-tools-1.2.4-june2003.shtml","tags":["article"]},{"url":"http://www10.software.ibm.com/developerworks/opensource/linux390/s390-tools-1.2.3-june2003.shtml","tags":["article"]},{"url":"http://www10.software.ibm.com/developerworks/opensource/linux390/s390-tools-1.2.2-june2003.shtml","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=112891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=115820","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_066.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-0077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617138","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0077","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2004-0077","description":"The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T00:01:23.757Z","updated_at":"2026-11-02T14:34:55.098814Z"}],"euvd":[{"id":"EUVD-2004-0077","description":"The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T00:01:23Z","updated_at":"2026-11-03T01:15:21.029087Z"}],"ghsa":[{"id":"GHSA-pm7j-3492-hq9m","title":"The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6...","description":"The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.","status":"published","published":"2022-04-29T02:57:08Z","modified":"2023-01-30T05:02:24Z","updated_at":"2026-11-02T14:46:38.066268Z"}],"nvd":[{"id":"CVE-2004-0077","description":"The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.","status":"published","published":"2004-03-03T05:00:00Z","modified":"2026-06-16T22:04:52.937Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:49.729639Z"}],"osv":[{"id":"DSA-438","title":"linux-kernel-2.4.18-alpha+i386+powerpc - missing function return value check","status":"published","published":"2004-02-18T00:00:00Z","modified":"2026-03-09T02:09:59.938001Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-439","title":"linux-kernel-2.4.16-arm - several vulnerabilities","status":"published","published":"2004-02-18T00:00:00Z","modified":"2026-03-09T02:10:38.591856Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-440","title":"linux-kernel-2.4.17-powerpc-apus - several vulnerabilities","status":"published","published":"2004-02-18T00:00:00Z","modified":"2026-03-09T02:09:02.415221Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-441","title":"linux-kernel-2.4.17-mips+mipsel - missing function return value check","status":"published","published":"2004-02-18T00:00:00Z","modified":"2026-03-09T02:09:20.696115Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-442","title":"linux-kernel-2.4.17-s390 - several vulnerabilities","status":"published","published":"2004-02-19T00:00:00Z","modified":"2026-03-09T02:09:28.985559Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-444","title":"linux-kernel-2.4.17-ia64 - missing function return value check","status":"published","published":"2004-02-20T00:00:00Z","modified":"2026-03-09T02:10:36.954158Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-450","title":"linux-kernel-2.4.19-mips - several vulnerabilities","status":"published","published":"2004-02-27T00:00:00Z","modified":"2026-03-09T02:09:44.176735Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-453","title":"linux-kernel-2.2.20-i386+m68k+powerpc - failing function and TLB flush","status":"published","published":"2004-03-02T00:00:00Z","modified":"2026-03-09T02:09:13.863361Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-454","title":"linux-kernel-2.2.22-alpha - failing function and TLB flush","status":"published","published":"2004-03-02T00:00:00Z","modified":"2026-03-09T02:11:36.94932Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-456","title":"linux-kernel-2.2.19-arm - failing function and TLB flush","status":"published","published":"2004-03-06T00:00:00Z","modified":"2026-03-09T02:10:25.232209Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"DSA-466","title":"linux-kernel-2.2.10-powerpc-apus - failing function and TLB flush","status":"published","published":"2004-03-18T00:00:00Z","modified":"2026-03-09T02:10:46.41846Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"DSA-470","title":"linux-kernel-2.4.17-hppa - several vulnerabilities","status":"published","published":"2004-04-01T00:00:00Z","modified":"2026-03-09T02:10:55.095129Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"DSA-475","title":"linux-kernel-2.4.18-hppa - several vulnerabilities","status":"published","published":"2004-04-05T00:00:00Z","modified":"2026-03-09T02:09:20.876341Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"DSA-514","title":"kernel-image-sparc-2.2 - failing function and TLB flush","status":"published","published":"2004-06-04T00:00:00Z","modified":"2026-03-09T02:10:24.207266Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"RHSA-2004:066","title":"Red Hat Security Advisory: kernel security update","status":"published","published":"2024-09-12T22:07:25Z","modified":"2026-06-26T10:01:04Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}