CVE-2004-0427

Published: Jul 7, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.

Affected (2)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.4.0 to 2.4.26
Linux Linux Kernel	From 2.6.0 to 2.6.6

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (68)

ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc (unsafe URL)

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc (unsafe URL)

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846

Source: cve@mitre.org

Broken Link

http://fedoranews.org/updates/FEDORA-2004-111.shtml

Source: cve@mitre.org

Third Party Advisory

http://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA

Source: cve@mitre.org

Broken Link

http://linux.bkbits.net:8080/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A

Source: cve@mitre.org

Broken Link

http://marc.info/?l=linux-kernel&m=108139073506983&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/11429

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/11464

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/11486

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/11541

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/11861

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/11891

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/11892

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/20162

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/20163

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/20202

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/20338

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200407-02.xml

Source: cve@mitre.org

Broken Link

http://www.ciac.org/ciac/bulletins/o-164.shtml

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2006/dsa-1067

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2006/dsa-1069

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2006/dsa-1070

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2006/dsa-1082

Source: cve@mitre.org

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2004:037

Source: cve@mitre.org

Third Party Advisory

http://www.novell.com/linux/security/advisories/2004_10_kernel.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-255.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-260.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-327.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/10221

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.turbolinux.com/security/2004/TLSA-2004-14.txt

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/16002

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10297

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2819

Source: cve@mitre.org

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc (unsafe URL)