CVE-2004-0685
N/A
Published: October 26, 2004 at 04:00 AM UTC
Updated: June 16, 2026 at 10:06 PM UTC
4 products affected across 3 vendorsLinux KernelEnterprise LinuxEnterprise Linux Desktop
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.5%
Description
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.2.02.2.12.2.102.2.112.2.122.2.132.2.142.2.152.2.15 pre162.2.15_pre202.2.162.2.16 pre62.2.172.2.182.2.192.2.22.2.202.2.212.2.222.2.232.2.242.2.252.2.32.2.42.2.52.2.62.2.72.2.82.2.92.3.02.3.992.3.99 pre12.3.99 pre22.3.99 pre32.3.99 pre42.3.99 pre52.3.99 pre62.3.99 pre72.4.02.4.0 test12.4.0 test102.4.0 test112.4.0 test122.4.0 test22.4.0 test32.4.0 test42.4.0 test52.4.0 test62.4.0 test72.4.0 test82.4.0 test92.4.12.4.102.4.112.4.122.4.132.4.142.4.152.4.162.4.172.4.182.4.18 pre12.4.18 pre22.4.18 pre32.4.18 pre42.4.18 pre52.4.18 pre62.4.18 pre72.4.18 pre82.4.192.4.19 pre12.4.19 pre22.4.19 pre32.4.19 pre42.4.19 pre52.4.19 pre62.4.22.4.202.4.212.4.21 pre12.4.21 pre42.4.21 pre72.4.222.4.232.4.23 pre92.4.23_ow22.4.242.4.24_ow12.4.252.4.262.4.27 pre12.4.27 pre22.4.27 pre32.4.27 pre42.4.27 pre52.4.32.4.42.4.52.4.62.4.72.4.82.4.92.5.02.5.12.5.102.5.112.5.122.5.132.5.142.5.152.5.162.5.172.5.182.5.192.5.22.5.202.5.212.5.222.5.232.5.242.5.252.5.262.5.272.5.282.5.292.5.32.5.302.5.312.5.322.5.332.5.342.5.352.5.362.5.372.5.382.5.392.5.42.5.402.5.412.5.422.5.432.5.442.5.452.5.462.5.472.5.482.5.492.5.52.5.502.5.512.5.522.5.532.5.542.5.552.5.562.5.572.5.582.5.592.5.62.5.602.5.612.5.622.5.632.5.642.5.652.5.662.5.672.5.682.5.692.5.72.5.82.5.92.6.02.6.0 test12.6.0 test102.6.0 test112.6.0 test22.6.0 test32.6.0 test42.6.0 test52.6.0 test62.6.0 test72.6.0 test82.6.0 test92.6.12.6.1 rc12.6.1 rc22.6.22.6.32.6.42.6.52.6.62.6.6 rc12.6.72.6.7 rc12.6.8 rc12.6.8 rc22.6.8 rc32.6_test9_cvs
95%
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (19)
x_refsource_CONFIRM
Source: [email protected]
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2006/dsa-1067Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2006/dsa-1069Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2006/dsa-1070Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card