Denial of Service Vulnerability in Linux Kernel 2.6 by PaX Patches

CVE-2004-1983

What is CVE-2004-1983?

The arch_get_unmapped_area function within mmap.c in the PaX patches for the Linux kernel 2.6 is susceptible to a denial of service attack. When Address Space Layout Randomization (ASLR) is enabled, local users can exploit this vulnerability, potentially causing an infinite loop that disrupts system processes. The exact attack vectors remain unspecified, rendering it crucial for users and system administrators to address this vulnerability to maintain system integrity and availability.

References