Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation

The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.

Published 3 Mar 2004Updated 16 Jun 202646 sources
CVSS 7.2 ✓ VERIFIED REFERENCE

Source timeline

Discovered through Exploit-DBView source ↗
CVE record published by NVDView source ↗