PatchTheCVECVE-2004-0554: Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly
CVE-2004-0554 is a low-severity flaw (CVSS 2.1) affecting converged communications server, modular messaging message storage server, linux. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.
Why this priority
- Public exploit reference
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 2.1 (Low) |
| EPSS exploit chance | 0.9% (top 41%) |
| CISA exploited list | No |
| Published | 2004-08-06 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2004-0554?
converged communications server: mitigate or apply the listed mitigation; modular messaging message storage server: mitigate or apply the listed mitigation; linux: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2004-0554 being exploited?
CVE-2004-0554 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2004-0554 affect?
CVE-2004-0554 affects converged communications server, modular messaging message storage server, linux. Severity is low (CVSS 2.1). Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demons
How urgent is CVE-2004-0554?
Priority 32/100. Public exploit reference; On your watchlist
Software pages
Related CVEs
- CVE-2005-0003 LOW 2.1 MITIGATE MITIGATE The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for
- CVE-2004-1235 MEDIUM 6.2 MITIGATE MITIGATE Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 t
- CVE-2004-0595 MEDIUM 6.8 MITIGATE MITIGATE The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters w
- CVE-2004-0594 MEDIUM 5.1 DOWNGRADE MITIGATE The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such a
- CVE-2004-0495 HIGH 7.2 MITIGATE MITIGATE Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access ke