CVEvulnerability

CVE-2004-1068

6.2 MEDIUM Published 2005-01-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C

Description

A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.

Affected configurations

• linux linux kernel 2.4.0 • linux linux kernel 2.4.1 • linux linux kernel 2.4.2 • linux linux kernel 2.4.3 • linux linux kernel 2.4.4 • linux linux kernel 2.4.5 • linux linux kernel 2.4.6 • linux linux kernel 2.4.7 • linux linux kernel 2.4.8 • linux linux kernel 2.4.9 • linux linux kernel 2.4.10 • linux linux kernel 2.4.12 • linux linux kernel 2.4.13 • linux linux kernel 2.4.14 • linux linux kernel 2.4.15 • linux linux kernel 2.4.16 • linux linux kernel 2.4.17 • linux linux kernel 2.4.18 • linux linux kernel 2.4.19 • linux linux kernel 2.4.20 • linux linux kernel 2.4.21 • linux linux kernel 2.4.22 • linux linux kernel 2.4.23 • linux linux kernel 2.4.23 ow2 • linux linux kernel 2.4.24 • linux linux kernel 2.4.24 ow1 • linux linux kernel 2.4.25 • linux linux kernel 2.4.26 • linux linux kernel 2.4.27 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat linux advanced workstation 2.1 • ubuntu ubuntu linux 4.1

References