CVE-2004-0109: Linux Kernel

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Affected products

• Linux Linux Kernel: version 2.4.0 only; version 2.5.0 only; version 2.6.0 only

Published 2004-06-01. Last modified 2026-06-16.