CVE-2004-0491
LOW · CVSS 2.1EPSS 0.4%EU EUVD
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.
Key facts
- CVSS score
- 2.1 (v2.0)
- Severity
- LOW
- CVSS vector
AV:L/AC:L/Au:N/C:N/I:P/A:N- EPSS score
- 0.4% (28th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2004-0490)
- Published
- December 31, 2004
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2004-0490 in the EU Vulnerability Database. Last updated in EUVD on August 8, 2024.
View on the EU Vulnerability DatabaseAffected products
- redhat / enterprise linux
Certified products that may be affected
2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Red Hat Enterprise Linux WS, Version 3 Update 2 - Red Hat, Inc. - Common Criteria BSI-DSZ-CC-0259-2004 - archived
- Red Hat Enterprise Linux AS, Version 3 Update 2 - Red Hat, Inc. - Common Criteria BSI-DSZ-CC-0257-2004 - archived
References
- ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U
- http://marc.info/?l=linux-kernel&m=108087017610947&w=2
- http://secunia.com/advisories/19607
- http://www.redhat.com/support/errata/RHSA-2005-472.html
- http://www.securityfocus.com/bid/13769
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126411
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10672
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1117
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain