CVE-2004-0491: Red Hat Enterprise Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.

Affected products

• Red Hat Enterprise Linux: version 3.0 only

Published 2004-12-31. Last modified 2026-06-16.