CVE-2004-0228: Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local use...

Security readout for executives and security teams

CVE-2004-0228 is a Linux kernel 2.6 local privilege escalation flaw. A signedness error in the cpufreq proc handler could let a local user gain higher privileges. It is mainly a concern for legacy systems or appliances still running unpatched 2.6-era kernels. Exposure is most likely on legacy Linux kernel 2.6 systems, especially distributions covered by the listed 2004 Fedora, SUSE, Mandrake, Conectiva, and Gentoo advisories. The source bundle does not identify precise affected package versions or modern downstream status. Prioritize this for legacy estate review. It is old and not KEV-listed, but kernel-level local privilege escalation can materially increase breach impact where unsupported Linux 2.6 systems remain in production. Mitigation focus: Inventory systems still running Linux kernel 2.6 or vendor kernels from the 2004 advisory period.; Review the relevant vendor advisory for fixed kernel package guidance.; Apply vendor-supported kernel updates where available..

Prepared

Jun 30, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.