CVE-2007-6712
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when...
4.9 MediumFix available
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.
Exploit likelihood
0.39%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.
- Record
CVE-2007-6712- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.
- Record
CVE-2007-6712- Updated
- 2026-11-02
EUVDEUVD-2007-6676 No score
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.
- Record
EUVD-2007-6676- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g8gq-4rhw-xpq5 No score
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when...
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.
- Record
GHSA-g8gq-4rhw-xpq5- Updated
- 2026-11-02
OSVBELL-CVE-2007-6712
CVE-2007-6712 does not affect BellSoft software
- Record
BELL-CVE-2007-6712- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:4.0 |
before 2.6.18.dfsg.1-18etch5, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1 Show 15 moreShow less2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-172.6.18.dfsg.1-17etch12.6.18.dfsg.1-182.6.18.dfsg.1-18etch12.6.18.dfsg.1-18etch32.6.18.dfsg.1-18etch4 |
2.6.18.dfsg.1-18etch5 |
fai-kernelsDebian:4.0 |
before 1.17+etch.18etch5, plus listed versions 1.171.17+etch.13etch31.17+etch.13etch41.17+etch.13etch51.17+etch.13etch6 Show 13 moreShow less1.17+etch.161.17+etch.171.17+etch.17etch11.17+etch.18etch11.17+etch.18etch21.17+etch.18etch31.17+etch.18etch41.17+etch11.17+etch21.17+etch31.17+etch41.17+etch51.17etch1 |
1.17+etch.18etch5 |
user-mode-linuxDebian:4.0 |
before 2.6.18-1um-2etch.18etch5, plus listed versions 2.6.18-1um-22.6.18-1um-2etch.13etch32.6.18-1um-2etch.13etch42.6.18-1um-2etch.13etch52.6.18-1um-2etch.13etch6 Show 11 moreShow less2.6.18-1um-2etch.162.6.18-1um-2etch.172.6.18-1um-2etch.17etch12.6.18-1um-2etch.18etch12.6.18-1um-2etch.18etch22.6.18-1um-2etch.18etch32.6.18-1um-2etch.18etch42.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4 |
2.6.18-1um-2etch.18etch5 |
kernelRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-PAERed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debugRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
Show 40 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-docRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-headersRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-xenRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernelRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-PAERed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debugRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-docRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-headersRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-xenRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.21.el5 | 0:2.6.18-53.1.21.el5 |
kernel-rtRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6712 is a medium vulnerability (CVSS 4.9) in Kernel Linux Kernel, published April 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in linux-2.6 2.6.18.dfsg.1-18etch5.
References
redhat.com/support/errata/RHSA-2008-0275.html
git.kernel.org?p=linux/kernel/git/chris/linux-2.6.git%3Ba=commitdiff%3Bh=13788ccc41ceea5893f9c747c59bc0b28f2416c2
secunia.com/advisories/30294
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9210
exchange.xforce.ibmcloud.com/vulnerabilities/41827
Show 71 moreShow less
debian.org/security/2008/dsa-1588
ubuntu.com/usn/usn-625-1
lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
securityfocus.com/bid/29294
nvd.nist.gov/vuln/detail/CVE-2007-6712
github.com/advisories/GHSA-g8gq-4rhw-xpq5
docs.bell-sw.com/security/cves/CVE-2007-6712
access.redhat.com/errata/RHSA-2008:0275
bugzilla.redhat.com/show_bug.cgi?id=306591
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0275.json
cve.org/CVERecord?id=CVE-2007-5093