CVE-2007-5908

Buffer overflow in the (1) sysfs_show_available_clocksources and (2) sysfs_show_current_clocksources functions in Linux kernel

View on CVE.org
Published Nov 9, 2007 CVSS n/a EPSS n/a KEV · Not listed
Description
Buffer overflow in the (1) sysfs_show_available_clocksources and (2) sysfs_show_current_clocksources functions in Linux kernel 2.6.23 and earlier might allow local users to cause a denial of service or execute arbitrary code via crafted clock source names. NOTE: follow-on analysis by Linux developers states that "There is no way for unprivileged users (or really even the root user) to add new clocksources.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available

Subscriptions

No data.

Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
mitre
Published
Updated
Nov 28, 2007, 10:00 AM
Reserved
Nov 9, 2007, 12:00 AM

View source JSON

No data.

Status
Rejected
Published
Nov 9, 2007, 7:46 PM
Modified
Nov 7, 2023, 2:01 AM

View source JSON

Severity
Important
Public date
Nov 8, 2007, 12:00 AM

View source Bugzilla JSON

No data.