Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Linux 2.4 kernel 32‑bit emulation can crash or give root

CVE-2003-0959 · published 22 years ago
Summary

Versions of the Linux 2.4 kernel older than 2.4.21 that run 32‑bit programs on 64‑bit AMD hardware have a coding mistake that can be triggered by an attacker. This mistake may cause the system to stop working or allow the attacker to gain full administrator rights. Update the kernel to version 2.4.21 or later, or apply the relevant security patch, to protect your servers.

Original advisory text
Multiple integer overflows in the 32bit emulation for AMD64 architectures in Linux 2.4 kernel before 2.4.21 allows attackers to cause a denial of service or gain root privileges via unspecified vec...
Multiple integer overflows in the 32bit emulation for AMD64 architectures in Linux 2.4 kernel before 2.4.21 allows attackers to cause a denial of service or gain root privileges via unspecified vectors that trigger copy_from_user function calls with improper length arguments.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
2% chance of attack within 30 days
Timeline
Published31 Dec 2003
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2003-0959 · NVD
Track software like this
Free during beta