Description
load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | kernel-image-sparc-2.4 | 26woody1 | DSA-1070-1 |
| Debian 3.0 | kernel-patch-2.4.19-mips | 2.4.19-0.020911.1.woody5 | DSA-1070-1 |
| Debian 3.0 | kernel-source-2.4.16 | 2.4.16-1woody2 | DSA-1067-1 |
| Debian 3.0 | kernel-source-2.4.17 | 2.4.17-1woody4 | DSA-1082-1 |
| Debian 3.0 | kernel-source-2.4.18 | 2.4.18-14.4 | DSA-1069-1 |
| Debian 3.0 | kernel-source-2.4.19 | 2.4.19-4.woody3 | DSA-1070-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kernel +8 | 2.4.21-27.0.1.EL | RHSA-2004:689 |
Advisories 5
- RHSA-2004:689 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1082-1 kernel-source-2.4.17 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1067-1 kernel-source-2.4.16 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1069-1 kernel-source-2.4.18 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1070-1 kernel-source-2.4.19 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20163 third-party-advisory
- DSA-1082 vendor-advisory
- 12101 vdb-entry
- RHSA-2005:017 vendor-advisory
- FLSA:2336 vendor-advisory
- http://linux.bkbits.net:8080/linux-2.4/cset%404076466d_SqUm4azg4_v3FIG2-X6XQ
- DSA-1070 vendor-advisory
- RHSA-2004:689 vendor-advisory
- RHSA-2005:016 vendor-advisory
- 20162 third-party-advisory
- oval:org.mitre.oval:def:10608 vdb-entry signature
- DSA-1067 vendor-advisory
- DSA-1069 vendor-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=142965
- 20202 third-party-advisory
- linux-loadelfbinary-dos(18687) vdb-entry
- 20338 third-party-advisory