CVE-2007-1592: linux linux_kernel

Modified

Published 22-03-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-1592 is a medium (CVSS 4.9) vulnerability in linux linux_kernel. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 36.1% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.9, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.42%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10

DSA-1286-1 DSA-1304 DSA-1304-1 DSA-1503-1 DSA-1503-2 RHBA-2007:0304+4 more

Timeline

22-03-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.

CVSS metrics

1 score · 1 source · 1 version

v2.04.9

EPSS trend

Probability

0.42%

Chance of exploitation in the next 30 days

Percentile

36%

Versus all other CVEs

30-day change

Increase +0.01 pp

From 0.40% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel2.6.0 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.1:rc3 | 2.6.2 | 2.6.2:rc1 | 2.6.2:rc2 | 2.6.2:rc3 | 2.6.3 | 2.6.3:rc1 | 2.6.3:rc2 | 2.6.3:rc3 | 2.6.3:rc4 | 2.6.4 | 2.6.4:rc1 | 2.6.4:rc2 | 2.6.4:rc3 | 2.6.5 | 2.6.5:rc1 | 2.6.5:rc2 | 2.6.5:rc3 | 2.6.6 | 2.6.6:rc1 | 2.6.6:rc2 | 2.6.6:rc3 | 2.6.7 | 2.6.7:rc1 | 2.6.7:rc2 | 2.6.7:rc3 | 2.6.8 | 2.6.8:rc1 | 2.6.8:rc2 | 2.6.8:rc3 | 2.6.8:rc4 | 2.6.8.1 | 2.6.9 | 2.6.9:rc1 | 2.6.9:rc2 | 2.6.9:rc3 | 2.6.9:rc4 | 2.6.10 | 2.6.10:rc1 | 2.6.10:rc2 | 2.6.10:rc3 | 2.6.11 | 2.6.11:rc1 | 2.6.11:rc2 | 2.6.11:rc3 | 2.6.11:rc4 | 2.6.11:rc5 | 2.6.11.1 | 2.6.11.2 | 2.6.11.3 | 2.6.11.4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.9 | 2.6.11.10 | 2.6.11.11 | 2.6.11.12 | 2.6.12 | 2.6.12:rc1 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 2.6.12:rc6 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13:rc1 | 2.6.13:rc2 | 2.6.13:rc3 | 2.6.13:rc4 | 2.6.13:rc5 | 2.6.13:rc6 | 2.6.13:rc7 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.13.5 | 2.6.14 | 2.6.14:rc1 | 2.6.14:rc2 | 2.6.14:rc3 | 2.6.14:rc4 | 2.6.14:rc5 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.14.6 | 2.6.14.7 | 2.6.15 | 2.6.15:rc1 | 2.6.15:rc2 | 2.6.15:rc3 | 2.6.15:rc4 | 2.6.15:rc5 | 2.6.15:rc6 | 2.6.15:rc7 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.15.6 | 2.6.15.7 | 2.6.16 | 2.6.16:rc1 | 2.6.16:rc2 | 2.6.16:rc3 | 2.6.16:rc4 | 2.6.16:rc5 | 2.6.16:rc6 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16.17 | 2.6.16.18 | 2.6.16.19 | 2.6.16.20 | 2.6.16.21 | 2.6.16.22 | 2.6.16.23 | 2.6.16.24 | 2.6.16.25 | 2.6.16.26 | 2.6.16.27 | 2.6.16.28 | 2.6.16.29 | 2.6.16.30 | 2.6.16.31 | 2.6.17 | 2.6.17:rc1 | 2.6.17:rc2 | 2.6.17:rc3 | 2.6.17:rc4 | 2.6.17:rc5 | 2.6.17:rc6 | 2.6.17.1 | 2.6.17.2 | 2.6.17.3 | 2.6.17.4 | 2.6.17.5 | 2.6.17.6 | 2.6.17.7 | 2.6.17.8 | 2.6.17.9 | 2.6.17.10 | 2.6.17.11 | 2.6.17.12 | 2.6.17.13 | 2.6.17.14 | 2.6.18 | 2.6.18:rc1 | 2.6.18:rc2 | 2.6.18:rc3 | 2.6.18:rc4 | 2.6.18:rc5 | 2.6.18:rc6 | 2.6.18:rc7 | 2.6.18.1 | 2.6.18.2 | 2.6.18.3 | 2.6.18.4 | 2.6.18.5 | 2.6.18.6 | 2.6.18.7 | 2.6.18.8 | 2.6.19 | 2.6.19:rc1 | 2.6.19:rc2 | 2.6.19:rc3 | 2.6.19:rc4 | 2.6.19:rc5 | 2.6.19:rc6 | 2.6.19.1 | 2.6.19.2 | 2.6.19.3 | 2.6.19.4 | 2.6.19.5 | 2.6.19.6 | 2.6.19.7 | 2.6.20 | 2.6.20:rc1 | 2.6.20:rc2 | 2.6.20:rc3 | 2.6.20:rc4 | 2.6.20:rc5 | 2.6.20:rc6 | 2.6.20:rc7 | 2.6.20.1 | 2.6.20.2 | 2.6.20.3 | 2.6.20.4 | 2.6.20.5 | 2.6.20.6 | 2.6.20.7 | 2.6.20.8 | 2.6.20.9 | 2.6.20.10 | 2.6.20.11 | 2.6.20.12 | 2.6.20.13 | 2.6.20.14 | 2.6.20.15 | 2.6.20.16 | 2.6.20.17 | 2.6.20.18 | 2.6.20.19 | 2.6.20.20 | 2.6.20.21 | 2.6.21:rc1 | 2.6.21:rc2 | 2.6.21:rc3

1 vendor · 1 product

References

38 links

rhn.redhat.com/errata/RHSA-2007-0436.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2007/dsa-1286Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2007-0347.htmlVendor AdvisoryX Refsource REDHAT
marc.info?l=linux-netdev&m=117406721731891&w=2Mailing ListX Refsource MLIST
www.ubuntu.com/usn/usn-464-1Vendor AdvisoryX Refsource UBUNTU
www.novell.com/linux/security/advisories/2007_43_kernel.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDKSA-2007:078Vendor AdvisoryX Refsource MANDRIVA
www.redhat.com/support/errata/RHSA-2007-0673.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/24777Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/23104VDB EntryX Refsource BIDPatch

Show all 38 references

secunia.com/advisories/27528Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/26379Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25226Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.suse.com/archive/suse-security-announce/2007-May/0001.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/24618Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25683Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/1084VDB EntryX Refsource VUPENVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2011:051Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/25288Third Party AdvisoryX Refsource SECUNIAVendor Advisory
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478X Refsource MISC
www.redhat.com/support/errata/RHSA-2007-0672.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHBA-2007-0304.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/25099Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25961Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2008/dsa-1503Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/25078Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25392Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4X Refsource CONFIRM
www.novell.com/linux/security/advisories/2007_30_kernel.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/29058Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2007/dsa-1304Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/25630Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25714Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33176VDB EntryX Refsource XF
www.novell.com/linux/security/advisories/2007_35_kernel.htmlVendor AdvisoryX Refsource SUSE
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130VDB EntrySignatureX Refsource OVAL
git.kernel.orgX Refsource CONFIRM
support.avaya.com/elmodocs2/security/ASA-2007-404.htmX Refsource CONFIRM