CVE-2004-1235

MediumPublished

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows...

Published: Jan 20, 2005
Updated: Aug 8, 2024
Assigning CNA: mitre
Evidence observed: Jan 7, 2005

Primary CVSS

6.2/ 10Medium

nvd · CVSS 2.0

AV:L/AC:H/Au:N/C:C/I:C/A:C

EPSS probability estimate

2.9%

Low · next 30 days

Percentile: 86.2%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.

Sources

2004Exploit
Linux kernel privilege escalation exploits targeting CVE-2004-0077 and CVE-2004-1235, including caps_to_root technique for gaining root access.
LinuxEelvationExploit
Linux Eelvation(持续更新)
linux-kernel-exploitsExploit
linux-kernel-exploits Linux平台提权漏洞集合
Linux Kernel 2.4.29-rc2 - 'uselib()' Local Privilege Escalation (1)Exploit
Paul Starzetz · linux · Jan 7, 2005
Linux Kernel 2.4 - 'uselib()' Local Privilege Escalation (2)Exploit
Tim Hsu · linux · Jan 27, 2005
Linux Kernel 2.4.x/2.6.x - 'uselib()' Local Privilege Escalation (3)Exploit
sd · linux · Mar 22, 2005

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.