CVE-2004-1235

CVE-2004-1235 describes a race condition vulnerability in the Linux kernel's uselib function, specifically within the load_elf_library and binfmt_aout calls. This flaw affects Linux kernel versions 2.4 through 2.4.29-rc2 and 2.6 through 2.6.10, impacting various distributions like Red Hat, Ubuntu, and SuSE. The vulnerability carries a CVSS score of 6.2, indicating a high severity. It allows local users to achieve arbitrary code execution and privilege escalation by manipulating VMA descriptors, requiring high attack complexity but leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, and lacking social media or media coverage, multiple proof-of-concept exploits are publicly available on ExploitDB. This suggests a potential for exploitation despite no evidence of active, widespread attacks.