CVE-2002-0499: Linux Kernel

Low severity, CVSS 2.1. EPSS: 1% chance of exploitation in the next 30 days.

The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.

Affected products

• Linux Linux Kernel: version 2.2.0 only; version 2.2.1 only; version 2.2.2 only; version 2.2.3 only; version 2.2.4 only; version 2.2.5 only; …

Published 2002-08-12. Last modified 2026-06-16.