CVE-2001-0907
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial...
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
Exploit likelihood
What each source reports
NVD Score used
2.1
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
- Record
CVE-2001-0907- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
- Record
CVE-2001-0907- Updated
- 2026-11-02
EUVDEUVD-2001-0890 No score
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
- Record
EUVD-2001-0890- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ccmf-3rv3-jmxv No score
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial...
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
- Record
GHSA-ccmf-3rv3-jmxv- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.2/2.4 - Deep Symbolic Link Denial of Service | 2001-10-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0907 is a low vulnerability (CVSS 2.1) in Linux Kernel, published October 18, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.79%, the 56th percentile. No source names a fixed version.
References
download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01
linuxsecurity.com/advisories/other_advisory-1650.html
marc.info?l=bugtraq&m=100343090106914&w=2
marc.info?l=bugtraq&m=100350685431610&w=2
novell.com/linux/security/advisories/2001_036_kernel_txt.html
linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3