CVE-2007-2875: Low severity Linux Linux kernel vulnerability
Integer underflow in the cpusettasksread function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2875?
CVE-2007-2875 has a moderate severity level due to its potential for local users to access sensitive kernel memory.
How do I fix CVE-2007-2875?
To fix CVE-2007-2875, update the Linux kernel to version 2.6.20.13 or later, or to version 2.6.21.4 or later.
Which systems are affected by CVE-2007-2875?
CVE-2007-2875 affects Linux kernel versions before 2.6.20.13, as well as 2.6.21 versions before 2.6.21.4, alongside specific Debian and Ubuntu distributions.
What is the impact of exploiting CVE-2007-2875?
Exploiting CVE-2007-2875 allows a local user to read sensitive kernel memory which can lead to information disclosure.
Can CVE-2007-2875 be exploited remotely?
No, CVE-2007-2875 can only be exploited by local users with access to the system.