What is CVE-2003-0956?

CVE-2003-0956 is a vulnerability in Linux Kernel. Published 2003-12-31.

Is CVE-2003-0956 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux Kernel

CVE-2003-0956

Multiple race conditions in the handling of O_DIRECT in Linux kernel prior to version 2.4.22 could cause stale data to be returned from the disk when handling sparse files, or cause incorrect data to be returned when a file is truncated as it is being read, which might allow local users to obtain sensitive data that was originally owned by other users, a different vulnerability than CVE-2003-0018.

EPSS: 0.003 (22.5th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel — versions 2.4.22
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2003-0956?: CVE-2003-0956 is a vulnerability in Linux Kernel. Published 2003-12-31.
Is CVE-2003-0956 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.