CVE-2004-1070

CVE-2004-1070 is a critical vulnerability in the Linux kernel's binfmt_elf loader (versions 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8), affecting various distributions including Red Hat, SUSE, and Trustix. It stems from improper return value checks in the load_elf_binary function, allowing local users to modify sensitive memory in setuid programs. This vulnerability carries a high CVSS score of 7.2, indicating a local attack vector with low complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, suggesting awareness and potential for future exploitation.