Unscored severity · published Apr 14, 2005
CVE-2004-1235
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.0; +34 more · source: NVD
CC
Converged Communications Server · Avaya
2.0 · source: NVD
EL
Enterprise Linux · Redhat
3.0; 3.0; 3.0; 4.0; 4.0; 4.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
3.0; 4.0 · source: NVD
FC
Fedora Core · Redhat
core_1.0; core_2.0; core_3.0 · source: NVD
IA
Intuity Audix · Avaya
All versions, or not specified · source: NVD
LI
Linux · Conectiva
10.0 · source: NVD
ML
Mandrake Linux · Mandrakesoft
9.2; 9.2; 10.0; 10.0; 10.1; 10.1 · source: NVD
ML
Mandrake Linux Corporate Server · Mandrakesoft
2.1; 2.1; 3.0 · source: NVD
MM
Mandrake Multi Network Firewall · Mandrakesoft
8.2 · source: NVD
MN
Mn100 · Avaya
All versions, or not specified · source: NVD
MM
Modular Messaging Message Storage Server · Avaya
1.1; 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1235
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1235
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930
isec.pl
http://isec.pl/vulnerabilities/isec-0021-uselib.txt
marc.info
http://marc.info/?l=bugtraq&m=110512575901427&w=2
secunia.com
http://secunia.com/advisories/20162
secunia.com
http://secunia.com/advisories/20163
secunia.com
http://secunia.com/advisories/20202
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability