CVE-2003-1040: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.

Affected products

  • Linux Linux Kernel: version 2.4.0 only

Published 2004-04-15. Last modified 2026-06-16.