CVE-2007-5500

kernel hang via userspace PTRACE+waitid

Published Nov 20, 2007 CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Description
The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1428-2 New Linux 2.6.18 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1481-1 New Linux 2.6.18 packages fix several vulnerabilities
EUVD EUVD EUVD-2007-5475 The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.
Ubuntu USN Ubuntu USN USN-558-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-574-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-578-1 Linux kernel vulnerabilities
References
Link Providers
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.23.y.git%3Ba=commitdiff%3Bh=36ef66c5d137b9a31fd8c35d236fb9e26ef74f97 cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2008-0055.html cve-icon cve-icon
http://secunia.com/advisories/27664 cve-icon cve-icon
http://secunia.com/advisories/27703 cve-icon cve-icon
http://secunia.com/advisories/27888 cve-icon cve-icon
http://secunia.com/advisories/27919 cve-icon cve-icon
http://secunia.com/advisories/27922 cve-icon cve-icon
http://secunia.com/advisories/28033 cve-icon cve-icon
http://secunia.com/advisories/28170 cve-icon cve-icon
http://secunia.com/advisories/28706 cve-icon cve-icon
http://secunia.com/advisories/28748 cve-icon cve-icon
http://secunia.com/advisories/28971 cve-icon cve-icon
http://secunia.com/advisories/29245 cve-icon cve-icon
http://secunia.com/advisories/30818 cve-icon cve-icon
http://secunia.com/advisories/30962 cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1428 cve-icon cve-icon
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2007_63_kernel.html cve-icon cve-icon
http://www.securityfocus.com/bid/26477 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-558-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-574-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-578-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3902 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/38547 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1965 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-5500 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9868 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-5500 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00032.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00170.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00302.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 3:31 PM
Reserved
Oct 17, 2007, 12:00 AM
Status
Modified
Published
Nov 20, 2007, 2:46 AM
Modified
Jun 16, 2026, 10:46 PM
Severity
Important
Public date
Nov 16, 2007, 12:00 AM