ID:10306 - Exploit for Race condition in Linux kernel - CVE-2004-1235

 
Main Vulnerability Database Exploits ID:10306 - Exploit for Race condition in Linux kernel - CVE-2004-1235

ID:10306 - Exploit for Race condition in Linux kernel - CVE-2004-1235

Published: August 7, 2024


Vulnerability identifier: #VU95474
Vulnerability risk: Low
CVE-ID: CVE-2004-1235
CWE-ID: CWE-362
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to execute arbitrary code.

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.


Remediation

Install update from vendor's repository.