Vulnerability in Linux Kernel

CVE-2007-3848

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

EPSS: 0.004 (28.9th percentile) — read the EPSS interpretation.

Affected products

References