CVE-2004-1070
N/A
Published: December 1, 2004 at 05:00 AM UTC
Updated: June 16, 2026 at 10:06 PM UTC
8 products affected across 5 vendorsLinux KernelEnterprise LinuxEnterprise Linux Desktop
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.5%
Description
The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.4.02.4.0 test12.4.0 test102.4.0 test112.4.0 test122.4.0 test22.4.0 test32.4.0 test42.4.0 test52.4.0 test62.4.0 test72.4.0 test82.4.0 test92.4.12.4.102.4.112.4.122.4.132.4.142.4.152.4.162.4.172.4.182.4.18 pre12.4.18 pre22.4.18 pre32.4.18 pre42.4.18 pre52.4.18 pre62.4.18 pre72.4.18 pre82.4.192.4.19 pre12.4.19 pre22.4.19 pre32.4.19 pre42.4.19 pre52.4.19 pre62.4.22.4.202.4.212.4.21 pre12.4.21 pre42.4.21 pre72.4.222.4.232.4.23 pre92.4.23_ow22.4.242.4.24_ow12.4.252.4.262.4.272.4.27 pre12.4.27 pre22.4.27 pre32.4.27 pre42.4.27 pre52.4.32.4.42.4.52.4.62.4.72.4.82.4.92.6.02.6.0 test12.6.0 test102.6.0 test112.6.0 test22.6.0 test32.6.0 test42.6.0 test52.6.0 test62.6.0 test72.6.0 test82.6.0 test92.6.12.6.1 rc12.6.1 rc22.6.22.6.32.6.42.6.52.6.62.6.6 rc12.6.72.6.7 rc12.6.82.6.8 rc12.6.8 rc22.6.8 rc32.6.9 2.6.202.6_test9_cvs
95%
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (19)
Vendor Advisoryx_refsource_SGI
Source: [email protected]
ftp://patches.sgi.com/support/free/security/advisories/20060402-01-UThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/19607Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/20162Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/20163Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/20202Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/20338Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2006/dsa-1067Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2006/dsa-1069Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card