CVE-2004-0972: The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other...

Security readout for executives and security teams

CVE-2004-0972 is a local file-overwrite flaw in the lvmcreate_initrd script from the lvm package. A user with local access could abuse unsafe temporary file handling to overwrite files through symlinks. The confirmed scope is Trustix Secure Linux 1.5 through 2.1; other operating systems are only described as possible. Exposure is most likely on legacy Trustix Secure Linux 1.5 through 2.1 systems with the affected lvm package installed. Systems without local untrusted users have lower practical risk. Broader operating-system exposure is not confirmed by the provided sources. Treat this as a legacy-system hygiene issue with moderate urgency. It is not remotely exploitable based on the provided evidence, but local file overwrite can matter on shared or poorly isolated servers, especially unsupported Linux estates. Mitigation focus: Inventory Trustix Secure Linux 1.5 through 2.1 systems and installed lvm packages.; Review Trustix errata 2004-0050 and Red Hat RHBA-2004:232 where applicable.; Apply vendor-supported lvm updates or replace unsupported legacy operating systems..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.