CVE-2004-0424: Linux Kernel

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.

Affected products

• Linux Linux Kernel: version 2.4.22 only; version 2.4.23 only; version 2.4.23_ow2 only; version 2.4.24 only; version 2.4.24_ow1 only; version 2.4.25 only; …
• Sgi Propack: version 3.0 only
• Slackware Slackware Linux: version 9.1 only; version current only

Published 2004-07-07. Last modified 2026-06-16.