CVE-2004-1235

Linux kernel <2.6.11 - RCE

Title source: llm

Description

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Tim Hsu · clocallinux
https://www.exploit-db.com/exploits/778
exploitdb WORKING POC VERIFIED
by Paul Starzetz · clocallinux
https://www.exploit-db.com/exploits/744
exploitdb WORKING POC VERIFIED
by sd · clocallinux
https://www.exploit-db.com/exploits/895

References (25)

... and 5 more

Scores

EPSS 0.0008
EPSS Percentile 24.3%

Classification

Status draft

Affected Products (50)

avaya/mn100
avaya/network_routing
avaya/converged_communications_server
avaya/s8710
avaya/s8710
avaya/modular_messaging_message_storage_server
avaya/modular_messaging_message_storage_server
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
... and 35 more

Timeline

Published Apr 14, 2005
Tracked Since Feb 18, 2026