Description
Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | kernel-image-2.4.17-hppa | 32.4 | DSA-480 |
| Debian 3.0 | kernel-image-2.4.17-ia64 | 011226.17 | DSA-481 |
| Debian 3.0 | kernel-image-2.4.17-s390 +1 | 2.4.17-2.woody.4 | DSA-482 |
| Debian 3.0 | kernel-image-2.4.18-1-alpha | 2.4.18-15 | DSA-479 |
| Debian 3.0 | kernel-image-2.4.18-1-i386 | 2.4.18-13 | DSA-479 |
| Debian 3.0 | kernel-image-2.4.18-hppa | 62.3 | DSA-480 |
| Debian 3.0 | kernel-image-2.4.18-i386bf | 2.4.18-5woody8 | DSA-479 |
| Debian 3.0 | kernel-patch-2.4.16-arm +3 | 20040419 | DSA-495 |
| Debian 3.0 | kernel-patch-2.4.17-apus | 2.4.17-5 | DSA-482 |
| Debian 3.0 | kernel-patch-2.4.17-mips +1 | 2.4.17-0.020226.2.woody6 | DSA-489 |
| Debian 3.0 | kernel-patch-2.4.18-powerpc | 2.4.18-1woody5 | DSA-479 |
| Debian 3.0 | kernel-patch-2.4.19-mips | 2.4.19-0.020911.1.woody4 | DSA-491 |
| Debian 3.0 | kernel-source-2.4.16 | 2.4.16-1woody2 | DSA-495 |
| Debian 3.0 | kernel-source-2.4.17 | 2.4.17-1woody3 | DSA-489, DSA-482 |
| Debian 3.0 | kernel-source-2.4.18 | 2.4.18-14.3 | DSA-479 |
| Debian 3.0 | kernel-source-2.4.19 | 2.4.19-4.woody2 | DSA-491 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kernel +8 | 2.4.21-9.0.3.EL | RHSA-2004:183 |
Advisories 8
- RHSA-2004:183 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-491 linux-kernel-2.4.19-mips - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-482 linux-kernel-2.4.17-apus+s390 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-480 linux-kernel-2.4.17+2.4.18-hppa - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-479 linux-kernel-2.4.18-alpha+i386+powerpc - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-495 linux-kernel-2.4.16-arm - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-481 linux-kernel-2.4.17-ia64 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-489 linux-kernel-2.4.17-mips+mipsel - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- linux-iso9660-bo(15866) vdb-entry
- 11626 third-party-advisory
- 11464 third-party-advisory
- RHSA-2004:105 vendor-advisory
- O-127 third-party-advisory government-resource
- 11518 third-party-advisory
- 2004-0020 vendor-advisory
- DSA-482 vendor-advisory
- 11861 third-party-advisory
- 11362 third-party-advisory
- oval:org.mitre.oval:def:940 vdb-entry signature
- DSA-495 vendor-advisory
- RHSA-2004:183 vendor-advisory
- DSA-479 vendor-advisory
- 12003 third-party-advisory
- 11891 third-party-advisory
- SuSE-SA:2004:009 vendor-advisory
- 11469 third-party-advisory
- 11486 third-party-advisory
- oval:org.mitre.oval:def:10733 vdb-entry signature
- DSA-480 vendor-advisory
- TLSA-2004-14 vendor-advisory
- 10141 vdb-entry
- 11986 third-party-advisory
- 11470 third-party-advisory
- CLA-2004:846 vendor-advisory
- 11361 third-party-advisory
- DSA-489 vendor-advisory
- DSA-481 vendor-advisory
- 11373 third-party-advisory
- ESA-20040428-004 vendor-advisory
- RHSA-2004:106 vendor-advisory
- O-121 third-party-advisory government-resource
- http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities
- 11429 third-party-advisory
- 11494 third-party-advisory
- MDKSA-2004:029 vendor-advisory
- GLSA-200407-02 vendor-advisory
- RHSA-2004:166 vendor-advisory
- DSA-491 vendor-advisory