Unscored severity · published Aug 6, 2004
CVE-2004-0535
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory
–
CVSS
0.5%
EPSS
No
On KEV
Description
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.0; +34 more · source: NVD
LI
Linux · Conectiva
8.0; 9.0 · source: NVD
ML
Mandrake Linux · Mandrakesoft
9.1; 9.1; 9.2; 9.2; 10.0; 10.0 · source: NVD
ML
Mandrake Linux Corporate Server · Mandrakesoft
2.1; 2.1 · source: NVD
MM
Mandrake Multi Network Firewall · Mandrakesoft
8.2 · source: NVD
SC
Secure Community · Engardelinux
2.0 · source: NVD
SL
Secure Linux · Engardelinux
1.5 · source: NVD
SE
Suse Email Server · Suse
3.1; iii · source: NVD
SL
Suse Linux · Suse
7; 8; 8.0; 8.0; 8.1; 8.2; +3 more · source: NVD
SL
Suse Linux Admin-cd For Firewall · Suse
All versions, or not specified · source: NVD
SL
Suse Linux Connectivity Server · Suse
All versions, or not specified · source: NVD
SL
Suse Linux Database Server · Suse
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0535
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0535
bugzilla.redhat.com
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845
lwn.net
http://lwn.net/Articles/91155/
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200407-02.xml
www.kernel.org
http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability