CVEvulnerability

CVE-2007-6417

7.2 HIGH Published 2007-12-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-12-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-200, CWE-399

Description

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).

Affected configurations

• linux linux kernel 2.6.11 • linux linux kernel 2.6.12 • linux linux kernel 2.6.13 • linux linux kernel 2.6.14 • linux linux kernel 2.6.15 • linux linux kernel 2.6.16 • linux linux kernel 2.6.17 • linux linux kernel 2.6.18 • linux linux kernel 2.6.19 • linux linux kernel 2.6.20 • linux linux kernel 2.6.21 • linux linux kernel 2.6.22 • linux linux kernel 2.6.23

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References