CVE-2004-1071

CVE-2004-1071 describes a critical vulnerability in the binfmt_elf loader within Linux kernels 2.4.x and 2.6.x, affecting various distributions including Red Hat and SUSE. This flaw arises from improper handling of failed mmap calls, leading to an incorrect memory mapping that local users can leverage to execute arbitrary code. With a CVSS score of 7.2, it presents a high severity risk due to its low attack complexity and complete impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or Metasploit modules, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.