CVE-2003-0985

CVE-2003-0985 describes a critical vulnerability in the mremap system call (do_mremap) of Linux kernel versions 2.4.x before 2.4.21, and potentially other versions before 2.4.24, due to improper bounds checking. This flaw allows a local attacker to create a zero-length virtual memory area (VMA), leading to a denial of service and potentially privilege escalation. With a CVSS score of 7.2, it is considered highly severe, requiring local access with low attack complexity, and having complete impact on confidentiality, integrity, and availability. While not listed on the KEV catalog or showing active exploitation, public exploit code exists on ExploitDB, indicating its potential for abuse, though it has received minimal community discussion or media coverage.