CVE-2004-0427
- State
- Published
- Severity
- Not scored
- Published
- Apr 30, 2004
- Updated
- Aug 8, 2024
- Reserved
- Apr 29, 2004
Description
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20163third-party-advisory
- RHSA-2004:327vendor-advisory
- 11464third-party-advisory
- http://linux.bkbits.net:8080/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A
- linux-dofork-memory-leak(16002)vdb-entry
- DSA-1082vendor-advisory
- RHSA-2004:255vendor-advisory
- FEDORA-2004-111vendor-advisory
- 11861third-party-advisory
- [linux-kernel] 20040408 [PATCH]: 2.4/2.6 do_fork() error path memory leakmailing-list
- RHSA-2004:260vendor-advisory
- SuSE-SA:2004:010vendor-advisory
- DSA-1070vendor-advisory
- oval:org.mitre.oval:def:10297vdb-entrysignature
- 20162third-party-advisory
- MDKSA-2004:037vendor-advisory
- 11891third-party-advisory
- 11486third-party-advisory
- TLSA-2004-14vendor-advisory
- 11541third-party-advisory
- http://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA
- DSA-1067vendor-advisory
- CLA-2004:846vendor-advisory
- 10221vdb-entry
- DSA-1069vendor-advisory
- 11429third-party-advisory
- oval:org.mitre.oval:def:2819vdb-entrysignature
- O-164third-party-advisorygovernment-resource
- 20202third-party-advisory
- GLSA-200407-02vendor-advisory
- 11892third-party-advisory
- 20338third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.