CVE-2007-0257

** DISPUTED ** Unspecified vulnerability in the expand_stack function in grsecurity PaX allows...

7.2 HighPublic exploitDisputed

Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code

Exploit likelihood

1.02%Down 2.2 points since Feb 4, 2022

What each source reports

CVE List7.8

Record: CVE-2007-0257
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2007-02597.8

Record: EUVD-2007-0259
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fg9q-hp23-pjjp7.8

** DISPUTED ** Unspecified vulnerability in the expand_stack function in grsecurity PaX allows...

** DISPUTED ** Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code.

Record: GHSA-fg9q-hp23-pjjp
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD7.8

Record: CVE-2007-0257
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

Affected products

grsecurity kernel patch

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Grsecurity Kernel PaX - Local Privilege Escalation	2006-12-18

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0257 is a high vulnerability (CVSS 7.2) in Grsecurity Kernel Patch, published January 16, 2007. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.02%, the 63rd percentile.

References

Show 9 moreShow less