CVE-2003-0986

Linux Kernel < 2.6.2 and < 2.4.24 - Denial of Service via ppc64 Userspace Data Copy

Title source: llm
STIX 2.1

Description

Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service.

References (4)

Core 4
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-017.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9707

Scores

EPSS 0.0034
EPSS Percentile 26.8%

Details

Status published
Products (13)
linux/linux_kernel 2.4.0 test10 (11 CPE variants)
linux/linux_kernel 2.4.18 (9 CPE variants)
linux/linux_kernel 2.4.19 pre1 (6 CPE variants)
linux/linux_kernel 2.4.21 pre1 (3 CPE variants)
linux/linux_kernel 2.4.22 pre10
linux/linux_kernel 2.4.23 (2 CPE variants)
linux/linux_kernel 2.4.23_ow2
linux/linux_kernel 2.4.24
linux/linux_kernel 2.4.24_ow1
linux/linux_kernel 2.6.0
... and 3 more
Published Dec 31, 2003
Tracked Since Feb 18, 2026