CVE-2004-2607

CVE-2004-2607 describes a numeric casting discrepancy in the Linux kernel (versions 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1) within the sdla_xfer function. This flaw allows local users to read portions of kernel memory. The vulnerability arises because a large 'len' argument, received as an integer, is cast to a short, preventing a read loop from properly filling a buffer. The vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), indicating a local attack vector with low complexity and a potential impact of partial confidentiality loss. There is no impact on integrity or availability. There is no evidence of active exploitation, nor is exploit code available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received no community discussion or media coverage, suggesting a low level of public attention and perceived threat.