CVE-2004-2536

Published Dec 31, 2004

Last updated 7 years ago

CVSS info 7.5

Overview

Description: The exit_thread function (process.c) in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS io_bitmap pointers if a process obtains IO access permissions from the ioperm function but does not drop those permissions when it exits, which allows other processes to access the per-TSS pointers, access restricted memory locations, and possibly gain privileges.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "142BCD48-8387-4D0C-A052-44DD4144CBFF"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E8220D81-9065-471F-9256-CFE7B9941555"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D2A55C17-C530-4898-BC95-DE4D495F0D7C"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2C14A949-E2B8-4100-8ED4-645CB996B08A"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EB445E3E-CCBD-4737-BE30-841B9A79D558"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F5301E27-8021-467C-A9A2-AF2137EF0299"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79787868-2D77-4B55-AD61-C2B357CCE047"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References