CVE-2004-0177

CVE-2004-0177 describes an information leak in the ext3 filesystem code within Linux kernel versions 2.4.x prior to 2.4.26. Improper initialization of journal descriptor blocks causes in-memory kernel data to be written to the device, allowing privileged users to read raw device data and obtain portions of kernel memory. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector and low complexity leading to a partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.