PT-2003-1098 · Linux · Linux Kernel
Published
2003-05-22
·
Updated
2017-10-11
·
CVE-2003-0700
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.4.20 through 2.4.21
Linux kernel version 2.4.20
Description
The issue affects the Linux kernel, specifically versions 2.4.20, and can be exploited remotely. This may lead to a breach of confidentiality, integrity, and availability of protected information. The C-Media PCI sound driver in Linux before 2.4.22 does not use the get user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities.
Recommendations
For Linux kernel version 2.4.20, consider updating to a version later than 2.4.21 to mitigate the risk.
For Linux kernel versions 2.4.20 through 2.4.21, restrict access to the C-Media PCI sound driver until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel