CVE-2004-0109: Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local...

Security readout for executives and security teams

CVE-2004-0109 is an old Linux kernel flaw in ISO9660 CD file-system handling. A malformed CD with an overly long symbolic link entry could corrupt kernel memory and allow code execution. The described attacker needs local, physical access, so urgency is highest for legacy systems that can mount untrusted optical media. Exposure is mainly legacy Linux hosts still running 2.4.x, 2.5.x, or 2.6.x kernels and capable of mounting untrusted ISO9660/CD media. Modern systems are unlikely to be affected unless they retain vulnerable kernels for embedded, archival, appliance, or lab use. Treat as a legacy exposure cleanup item with high impact but constrained attack path. Prioritize any internet-adjacent, shared-access, kiosk, lab, or operational technology systems running old Linux kernels and accepting removable media. Mitigation focus: Identify any Linux 2.4.x, 2.5.x, or 2.6.x systems still in service.; Apply the relevant vendor kernel advisory updates for each distribution.; Reboot systems after kernel updates to load the fixed kernel..

Prepared

Jun 30, 2026, 07:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.