Description
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | kernel-image-sparc-2.4 | 26woody1 | DSA-1070-1 |
| Debian 3.0 | kernel-patch-2.4.19-mips | 2.4.19-0.020911.1.woody5 | DSA-1070-1 |
| Debian 3.0 | kernel-source-2.4.16 | 2.4.16-1woody2 | DSA-1067-1 |
| Debian 3.0 | kernel-source-2.4.17 | 2.4.17-1woody4 | DSA-1082-1 |
| Debian 3.0 | kernel-source-2.4.18 | 2.4.18-14.4 | DSA-1069-1 |
| Debian 3.0 | kernel-source-2.4.19 | 2.4.19-4.woody3 | DSA-1070-1 |
Advisories 4
- DSA-1082-1 kernel-source-2.4.17 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1067-1 kernel-source-2.4.16 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1069-1 kernel-source-2.4.18 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1070-1 kernel-source-2.4.19 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20163 third-party-advisory
- DSA-1082 vendor-advisory
- 10233 vdb-entry
- SuSE-SA:2004:010 vendor-advisory
- DSA-1070 vendor-advisory
- 20162 third-party-advisory
- MDKSA-2004:037 vendor-advisory
- linux-panic-bo(15953) vdb-entry
- [fedora-announce] 20040422 Fedora alert FEDORA-2004-111 (kernel) mailing-list
- DSA-1067 vendor-advisory
- CLA-2004:846 vendor-advisory
- DSA-1069 vendor-advisory
- ESA-20040428-004 vendor-advisory
- 20202 third-party-advisory
- GLSA-200407-02 vendor-advisory
- 20338 third-party-advisory