CVE-2003-0246: Linux Kernel

Low severity, CVSS 3.6. EPSS: 0.5% chance of exploitation in the next 30 days.

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.

Affected products

• Linux Linux Kernel: version 2.4.0 only; version 2.4.1 only; version 2.4.2 only; version 2.4.3 only; version 2.4.4 only; version 2.4.5 only; …

Published 2003-06-16. Last modified 2026-06-16.