CVE catalog
CVE-2004-0077
linux-kernel-2.2.20-i386+m68k+powerpc - failing function and TLB flush
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.43% · Oct 25, 2026
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985. security flaw
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | kernel-source-2.2.22 | 3.0 | 2.2.22-1woody1 | fixed |
| Debian | kernel-image-2.2.22-alpha | 3.0 | 2.2.22-2 | fixed |
| Debian | kernel-source-2.2.10 | 3.0 | 2.2.10-2 | fixed |
| Debian | kernel-image-2.2.10-powerpc-apus | 3.0 | 2.2.10-13 | vulnerable |
| Debian | kernel-image-2.2.10-powerpc-apus | 3.0 | 2.2.10-13woody1 | fixed |
| Debian | kernel-image-2.4.17-ia64 | 3.0 | 011226.16 | fixed |
| Debian | kernel-source-2.2.19 | 3.0 | 2.2.19.1-4woody1 | fixed |
| Debian | kernel-patch-2.2.19-arm | 3.0 | 20040303 | fixed |
| Debian | kernel-image-2.2.19-netwinder | 3.0 | 20040303 | fixed |
| Debian | kernel-image-2.2.19-riscpc | 3.0 | 20040303 | fixed |
| Debian | kernel-source-2.2.20 | 3.0 | 2.2.20-5woody3 | fixed |
| Debian | kernel-source-2.4.18 | 3.0 | 2.4.18-14.2 | fixed |
| Debian | kernel-image-2.4.18-1-alpha | 3.0 | 2.4.18-14 | fixed |
| Debian | kernel-image-2.4.18-1-i386 | 3.0 | 2.4.18-12.2 | fixed |
| Debian | kernel-image-2.4.18-i386bf | 3.0 | 2.4.18-5 | vulnerable |
| Debian | kernel-image-2.4.18-i386bf | 3.0 | 2.4.18-5woody7 | fixed |
| Debian | kernel-patch-2.4.18-powerpc | 3.0 | 2.4.18-1woody4 | fixed |
| Debian | kernel-patch-2.4.17-mips | 3.0 | 2.4.17-0.020226.2.woody5 | fixed |
| Debian | kernel-source-2.2.20 | 3.0 | 2.2.20-5woody3 | fixed |
| Debian | kernel-image-2.2.20-i386 | 3.0 | 2.2.20-5woody5 | fixed |
| Debian | kernel-image-2.2.20-reiserfs-i386 | 3.0 | 2.2.20-4 | vulnerable |
| Debian | kernel-image-2.2.20-reiserfs-i386 | 3.0 | 2.2.20-4woody1 | fixed |
| Debian | kernel-image-2.2.20-amiga | 3.0 | 2.2.20-4 | vulnerable |
| Debian | kernel-image-2.2.20-amiga | 3.0 | 2.20-4 | fixed |
| Debian | kernel-image-2.2.20-atari | 3.0 | 2.2.20-3 | fixed |
| Debian | kernel-image-2.2.20-bvme6000 | 3.0 | 2.2.20-3 | fixed |
| Debian | kernel-image-2.2.20-mac | 3.0 | 2.2.20-3 | fixed |
| Debian | kernel-image-2.2.20-mvme147 | 3.0 | 2.2.20-3 | fixed |
| Debian | kernel-image-2.2.20-mvme16x | 3.0 | 2.2.20-3 | fixed |
| Debian | kernel-patch-2.2.20-powerpc | 3.0 | 2.2.20-3woody1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | kernel-source-2.2.22 | deb | 3.0 | 2.2.22-1woody1 | Not reported | DSA-454 | Not reported |
| Debian | kernel-image-2.2.22-alpha | deb | 3.0 | 2.2.22-2 | Not reported | DSA-454 | Not reported |
| Debian | kernel-source-2.2.10 | deb | 3.0 | 2.2.10-2 | Not reported | DSA-466 | Not reported |
| Debian | kernel-image-2.2.10-powerpc-apus | deb | 3.0 | 2.2.10-13woody1 | Not reported | DSA-466 | Not reported |
| Debian | kernel-image-2.4.17-ia64 | deb | 3.0 | 011226.16 | Not reported | DSA-444 | Not reported |
| Debian | kernel-source-2.2.19 | deb | 3.0 | 2.2.19.1-4woody1 | Not reported | DSA-456 | Not reported |
| Debian | kernel-patch-2.2.19-arm | deb | 3.0 | 20040303 | Not reported | DSA-456 | Not reported |
| Debian | kernel-image-2.2.19-netwinder | deb | 3.0 | 20040303 | Not reported | DSA-456 | Not reported |
| Debian | kernel-image-2.2.19-riscpc | deb | 3.0 | 20040303 | Not reported | DSA-456 | Not reported |
| Debian | kernel-source-2.2.20 | deb | 3.0 | 2.2.20-5woody3 | Not reported | DSA-514 | Not reported |
| Debian | kernel-source-2.4.18 | deb | 3.0 | 2.4.18-14.2 | Not reported | DSA-438 | Not reported |
| Debian | kernel-image-2.4.18-1-alpha | deb | 3.0 | 2.4.18-14 | Not reported | DSA-438 | Not reported |
| Debian | kernel-image-2.4.18-1-i386 | deb | 3.0 | 2.4.18-12.2 | Not reported | DSA-438 | Not reported |
| Debian | kernel-image-2.4.18-i386bf | deb | 3.0 | 2.4.18-5woody7 | Not reported | DSA-438 | Not reported |
| Debian | kernel-patch-2.4.18-powerpc | deb | 3.0 | 2.4.18-1woody4 | Not reported | DSA-438 | Not reported |
| Debian | kernel-patch-2.4.17-mips | deb | 3.0 | 2.4.17-0.020226.2.woody5 | Not reported | DSA-441 | Not reported |
| Debian | kernel-source-2.2.20 | deb | 3.0 | 2.2.20-5woody3 | Not reported | DSA-453 | Not reported |
| Debian | kernel-image-2.2.20-i386 | deb | 3.0 | 2.2.20-5woody5 | Not reported | DSA-453 | Not reported |
| Debian | kernel-image-2.2.20-reiserfs-i386 | deb | 3.0 | 2.2.20-4woody1 | Not reported | DSA-453 | Not reported |
| Debian | kernel-image-2.2.20-amiga | deb | 3.0 | 2.20-4 | Not reported | DSA-453 | Not reported |
| Debian | kernel-image-2.2.20-atari | deb | 3.0 | 2.2.20-3 | Not reported | DSA-453 | Not reported |
| Debian | kernel-image-2.2.20-bvme6000 | deb | 3.0 | 2.2.20-3 | Not reported | DSA-453 | Not reported |
| Debian | kernel-image-2.2.20-mac | deb | 3.0 | 2.2.20-3 | Not reported | DSA-453 | Not reported |
| Debian | kernel-image-2.2.20-mvme147 | deb | 3.0 | 2.2.20-3 | Not reported | DSA-453 | Not reported |
| Debian | kernel-image-2.2.20-mvme16x | deb | 3.0 | 2.2.20-3 | Not reported | DSA-453 | Not reported |
| Debian | kernel-patch-2.2.20-powerpc | deb | 3.0 | 2.2.20-3woody1 | Not reported | DSA-453 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://access.redhat.com/errata/RHSA-2004:106]
- [https://osv.dev/vulnerability/DSA-438]
- [https://osv.dev/vulnerability/DSA-441]
- [https://osv.dev/vulnerability/DSA-444]
- [https://osv.dev/vulnerability/DSA-453]
- [https://osv.dev/vulnerability/DSA-454]
- [https://osv.dev/vulnerability/DSA-456]
- [https://osv.dev/vulnerability/DSA-466]
- [https://osv.dev/vulnerability/DSA-514]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]