CVE-2004-1337: Conectiva Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.

Affected products

• Conectiva Linux: version 10.0 only
• GNU Realtime Linux Security Module: version 0.8.7 only
• Ubuntu Ubuntu Linux: version 4.1 only

Published 2004-12-23. Last modified 2026-06-16.