CVE-2003-0127

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-03-31 · updated 2026-06-16

Description

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.

Affected products

Linux kernel: 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5 (+41)

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0134.html
http://marc.info/?l=bugtraq&m=105301461726555&w=2
http://rhn.redhat.com/errata/RHSA-2003-088.html
http://rhn.redhat.com/errata/RHSA-2003-098.html
http://security.gentoo.org/glsa/glsa-200303-17.xml
http://www.debian.org/security/2003/dsa-270
http://www.debian.org/security/2003/dsa-276
http://www.debian.org/security/2003/dsa-311
http://www.debian.org/security/2003/dsa-312
http://www.debian.org/security/2003/dsa-332
http://www.debian.org/security/2003/dsa-336

Get alerted when CVE-2003-0127 or the next vulnerability affects your stack