CVEvulnerability

CVE-2007-3848

1.9 LOW Published 2007-08-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-08-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P

Description

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

Affected configurations

• linux linux kernel (<= 2.4.35)

References