CVE-2007-3848

Publication date 14 August 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

Status

Package Ubuntu Release Status
linux-source-2.6.15 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper
Fixed 2.6.15-29.58
linux-source-2.6.17 7.04 feisty Not in release
6.10 edgy
Fixed 2.6.17.1-12.40
6.06 LTS dapper Not in release
linux-source-2.6.20 7.04 feisty
Fixed 2.6.20-16.31
6.10 edgy Not in release
6.06 LTS dapper Not in release
linux-source-2.6.22 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-510-1
    • Linux kernel vulnerabilities
    • 31 August 2007
    • USN-509-1
    • Linux kernel vulnerabilities
    • 30 August 2007
    • USN-508-1
    • Linux kernel vulnerabilities
    • 31 August 2007

Other references