CVE-2004-0424

CVE-2004-0424 describes an integer overflow vulnerability in the ip_setsockopt function within specific versions of the Linux kernel (2.4.22-2.4.25 and 2.6.1-2.6.3). This flaw allows local users to trigger a denial of service (system crash) or potentially execute arbitrary code by manipulating the MCAST_MSFILTER socket option. With a CVSS score of 7.2, this vulnerability is considered highly severe, enabling local attackers to achieve complete confidentiality, integrity, and availability compromise with low attack complexity. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists for a local denial of service, and there is minimal community discussion or media coverage surrounding this CVE.