CVE-2007-0006: Low severity Linux Linux kernel vulnerability
Published Feb 6, 2007
·Updated
The key serial number collision avoidance code in the keyallocserial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service (crash) via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."
Affected Software
2 affected components
Linux Linux kernel<=2.6.20
Linux Linux kernel=2.6.9-2.6.20
Event History
Feb 6, 2007
CVE Published
07:28 PM
Feb 7, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0006?
CVE-2007-0006 has a moderate severity due to its potential to cause a denial of service.
2
How do I fix CVE-2007-0006?
To mitigate CVE-2007-0006, update the Linux kernel to a version later than 2.6.20.
3
What systems are affected by CVE-2007-0006?
CVE-2007-0006 affects Linux kernel versions from 2.6.9 to 2.6.20.
4
What type of attack does CVE-2007-0006 enable?
CVE-2007-0006 enables a local user to cause a denial of service by triggering a null dereference.
5
Who reported CVE-2007-0006?
CVE-2007-0006 was originally reported regarding 'spinlock CPU recursion' issues.