CVE-2007-3720: Low severity Linux Linux kernel vulnerability

Published Jul 12, 2007

Updated

The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that result in the process not being active during a clock interrupt, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."

Affected Software

1 affected component

Linux Linux kernel=2.4.0

Event History

Jul 12, 2007

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3720?

CVE-2007-3720 has a moderate severity level that allows for local denial of service attacks.

How do I fix CVE-2007-3720?

To fix CVE-2007-3720, upgrade to a newer version of the Linux kernel that is not affected by this vulnerability.

Who is affected by CVE-2007-3720?

CVE-2007-3720 affects users and systems running Linux kernel version 2.4.0.

What type of attack does CVE-2007-3720 enable?

CVE-2007-3720 enables a denial of service attack by allowing local users to consume CPU resources.

What is the impact of exploiting CVE-2007-3720?

Exploiting CVE-2007-3720 can lead to unresponsive systems due to excessive CPU consumption.