CVE-2004-1057

Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.

• http://secunia.com/advisories/18562
• http://www.kernel.org/pub/linux/kernel/people/andrea/kernels/v2.4/2.4.23aa3/00_VM_IO-4
• http://www.redhat.com/support/errata/RHSA-2005-016.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-017.html
• http://www.redhat.com/support/errata/RHSA-2006-0140.html
• http://www.securityfocus.com/bid/12338
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=137821Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19275
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11474
• http://secunia.com/advisories/18562
• http://www.kernel.org/pub/linux/kernel/people/andrea/kernels/v2.4/2.4.23aa3/00_VM_IO-4
• http://www.redhat.com/support/errata/RHSA-2005-016.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-017.html
• http://www.redhat.com/support/errata/RHSA-2006-0140.html
• http://www.securityfocus.com/bid/12338
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=137821Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19275
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11474

Published

Jan 21, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1051sudo before 1.6.8p2 allows local users to execute arbitrary …
• CVE-2004-1052Buffer overflow in the getnickuserhost function in BNC 2.8.9…
• CVE-2004-1053Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows …
• CVE-2004-1054Untrusted execution path vulnerability in invscout in IBM AI…
• CVE-2004-1055Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
• CVE-2004-1056Direct Rendering Manager (DRM) driver in Linux kernel 2.6 do…
• CVE-2004-1058Race condition in Linux kernel 2.6 allows local users to rea…
• CVE-2004-1059Multiple cross-site scripting (XSS) vulnerabilities in mnoGo…
• CVE-2004-1060Multiple TCP/IP and ICMP implementations, when using Path MT…
• CVE-2004-1061Cross-site scripting (XSS) vulnerability in Bugzilla before …
• CVE-2004-1062Multiple cross-site scripting (XSS) vulnerabilities in ViewC…
• CVE-2004-1063PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe…