VULNERABILITY INTELLIGENCE

CVE-2003-0018

CVSS score3.6 LOW
EPSS probability0.37%
CISA KEVNot currently listed
Published2003-02-19
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:P

Description

Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.

Primary references