cve/2004/CVE-2004-0077.md

CVE-2004-0077

Description

The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.

POC

Reference

• http://marc.info/?l=bugtraq&m=107711762014175&w=2
• http://security.gentoo.org/glsa/glsa-200403-02.xml
• http://www.redhat.com/support/errata/RHSA-2004-065.html

Github

No PoCs found on GitHub currently.