CVE-2003-0018: Linux Kernel

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.

Affected products

• Linux Linux Kernel: version 2.4.10 only; version 2.4.11 only; version 2.4.12 only; version 2.4.13 only; version 2.4.14 only; version 2.4.15 only; …

Published 2003-02-19. Last modified 2026-06-16.