$ cve CVE-2003-0985 JSON

CVE-2003-0985 EXPLOIT

7.2

HIGH · CVSS 2.0 · EPSS 1.2% (pctl 68)

Patch early

A public exploit exists.

Description

The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.

Scoring

CVSS	7.2 (HIGH, v2.0)
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS	1.23% — more likely to be exploited than 68% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-01-20
Last modified	2026-06-16

Affected (1)

Vendor	Product
linux	linux kernel

Public exploits

Source	Title	Date
exploit-db	Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Privilege Escalation	2004-01-15
exploit-db	Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (2)	2004-01-07
exploit-db	Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (1)	2004-01-06

References

→ the Explorer · watch your stack · NVD