Read the docs
TI-2003-00892 Aliases CVE-2003-0986GHSA-5pfr-4q63-hjgj

Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4…

Priority LOW 10Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service.

Why it matters now

EPSS 0.00348 28th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 42

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*2.4.0 test10VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*2.4.0 test11VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*2.4.0 test12VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*2.4.0 test2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*2.4.0 test3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*2.4.0 test4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*2.4.0 test5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*2.4.0 test6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*2.4.0 test7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*2.4.0 test8VulnerableLinux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:* Versions 2.4.0 test10 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:* Versions 2.4.0 test11 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:* Versions 2.4.0 test12 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:* Versions 2.4.0 test2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:* Versions 2.4.0 test3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:* Versions 2.4.0 test4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:* Versions 2.4.0 test5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:* Versions 2.4.0 test6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:* Versions 2.4.0 test7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:* Versions 2.4.0 test8 Vulnerable ·Linux
Show 32 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*2.4.0 test9VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*2.4.18VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*2.4.18 pre1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*2.4.18 pre2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*2.4.18 pre3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*2.4.18 pre4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*2.4.18 pre5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*2.4.18 pre6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*2.4.18 pre7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*2.4.18 pre8VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*2.4.19 pre1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*2.4.19 pre2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*2.4.19 pre3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*2.4.19 pre4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*2.4.19 pre5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*2.4.19 pre6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*2.4.21 pre1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*2.4.21 pre4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*2.4.21 pre7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*2.4.22 pre10VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*2.4.23VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*2.4.23 pre9VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*2.4.23_ow2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*2.4.24VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*2.4.24_ow1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*2.6.0VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*2.6.1 rc1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*2.6.1 rc2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*2.6.2VulnerableLinux
cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*3.0VulnerableRed Hat
  • cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:* Versions 2.4.0 test9 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:* Versions 2.4.18 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:* Versions 2.4.18 pre1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:* Versions 2.4.18 pre2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:* Versions 2.4.18 pre3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:* Versions 2.4.18 pre4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:* Versions 2.4.18 pre5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:* Versions 2.4.18 pre6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:* Versions 2.4.18 pre7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:* Versions 2.4.18 pre8 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:* Versions 2.4.19 pre1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:* Versions 2.4.19 pre2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:* Versions 2.4.19 pre3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:* Versions 2.4.19 pre4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:* Versions 2.4.19 pre5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:* Versions 2.4.19 pre6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:* Versions 2.4.21 pre1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:* Versions 2.4.21 pre4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:* Versions 2.4.21 pre7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:* Versions 2.4.22 pre10 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:* Versions 2.4.23 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:* Versions 2.4.23 pre9 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:* Versions 2.4.23_ow2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:* Versions 2.4.24 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:* Versions 2.4.24_ow1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:* Versions 2.6.0 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:* Versions 2.6.1 rc1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:* Versions 2.6.1 rc2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:* Versions 2.6.2 Vulnerable ·Linux
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat

Remediation

Red Hat 1 advisory

  • RHSA-2004:017 Released 2004-01-16 · Red Hat rating Important
    Updated kernel packages available for Red Hat Enterprise Linux 3 Update 1
    • Red Hat Desktop version 3 kernel-2.4.21-9.EL, kernel-2.4.21-9.EL.athlon, kernel-BOOT-2.4.21-9.EL.i386 +12
    • Red Hat Enterprise Linux AS version 3 kernel-2.4.21-9.EL, kernel-2.4.21-9.EL.athlon, kernel-2.4.21-9.EL.ia64 +20
    • Red Hat Enterprise Linux ES version 3 kernel-2.4.21-9.EL, kernel-2.4.21-9.EL.athlon, kernel-2.4.21-9.EL.ia64 +16
    • Red Hat Enterprise Linux WS version 3 kernel-2.4.21-9.EL, kernel-2.4.21-9.EL.athlon, kernel-2.4.21-9.EL.ia64 +16

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2004:017
Red Hat Enterprise Linux AS version 3Fixed RHSA-2004:017
Red Hat Enterprise Linux ES version 3Fixed RHSA-2004:017
Red Hat Enterprise Linux WS version 3Fixed RHSA-2004:017

Timeline

  1. 2026-10-02 Threatist record created from CVE-2003-0986
  2. 2026-10-03 Alias added: GHSA-5pfr-4q63-hjgj

References

Patch 1

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences