CVE-2004-0427
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
- CWE
- CWE-401
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
References
- ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc
- ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
- http://fedoranews.org/updates/FEDORA-2004-111.shtml
- http://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA