Unscored severity · published Dec 23, 2004
CVE-2004-0685
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; 2.2.5; +34 more · source: NVD
EL
Enterprise Linux · Redhat
3.0; 3.0; 3.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
3.0 · source: NVD
SL
Secure Linux · Trustix
2.0; 2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0685
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0685
bugzilla.redhat.com
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921
secunia.com
http://secunia.com/advisories/20162
secunia.com
http://secunia.com/advisories/20163
secunia.com
http://secunia.com/advisories/20202
secunia.com
http://secunia.com/advisories/20338
www.debian.org
http://www.debian.org/security/2006/dsa-1067
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability