CVE-2007-5001: Medium severity redhat Enterprise Linux Desktop vulnerability
Linux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via asynchronous input or output on a FIFO special file.
Other sources
Using asynchronous IO on a FIFO causes RHEL 3U9 to kernel panic.
(Does not occur in RHEL 4 as the pipewrite function has been re-written)
This is a security issue because a local unprivileged user can cause a kernel panic.
Reproducer in bz#311621
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5001?
CVE-2007-5001 has a severity rating of medium due to its potential to cause a denial of service via kernel panic.
How do I fix CVE-2007-5001?
To fix CVE-2007-5001, it is recommended to upgrade to a later version of the Linux kernel, specifically version 2.4.21 or newer.
Which versions of Red Hat Enterprise Linux are affected by CVE-2007-5001?
CVE-2007-5001 affects Red Hat Enterprise Linux versions 3.0, ws_3, es_3, and as_3.
Can CVE-2007-5001 be exploited remotely?
CVE-2007-5001 is primarily a local vulnerability, requiring local access to exploit.
What is the impact of CVE-2007-5001 on system stability?
The impact of CVE-2007-5001 is a kernel panic, which leads to system instability and denial of service.