Vulnerability in Linux Kernel
CVE-2007-4573
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
EPSS: 0.008 (53.5th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
- ARPSyndicate/cvemon
- R0B1NL1N/linux-kernel-exploitation
- Technoashofficial/kernel-exploitation-linux
- kdn111/linux-kernel-exploitation
- khanhdn111/linux-kernel-exploitation
- khanhdz-06/linux-kernel-exploitation
- khanhdz191/linux-kernel-exploitation
- khanhhdz/linux-kernel-exploitation
- khanhhdz06/linux-kernel-exploitation
- khanhnd123/linux-kernel-exploitation
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
Frequently asked questions
- What is CVE-2007-4573?
- CVE-2007-4573 is a vulnerability in Linux Kernel, classified under CWE-264. Published 2007-09-24.
- Is CVE-2007-4573 known to be exploited?
- 18 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.