CVE-2007-3740
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled,...
4.4 Medium
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.
Exploit likelihood
0.38%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.
- Record
CVE-2007-3740- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.
- Record
CVE-2007-3740- Updated
- 2026-11-02
EUVDEUVD-2007-3724 No score
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.
- Record
EUVD-2007-3724- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5hfq-gm8x-g6p7 No score
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled,...
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.
- Record
GHSA-5hfq-gm8x-g6p7- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:4.0 From an advisory covering 5 CVEs |
before 2.6.18.dfsg.1-13etch3, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch12.6.18.dfsg.1-13etch2 |
2.6.18.dfsg.1-13etch3 |
fai-kernelsDebian:4.0 From an advisory covering 5 CVEs |
before 1.17+etch.13etch3, plus listed versions 1.171.17+etch11.17+etch21.17+etch31.17+etch41.17+etch51.17etch1 |
1.17+etch.13etch3 |
user-mode-linuxDebian:4.0 From an advisory covering 5 CVEs |
before 2.6.18-1um-2etch.13etch3, plus listed versions 2.6.18-1um-22.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4 |
2.6.18-1um-2etch.13etch3 |
kernel-image-2.6.8-s390Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-6sarge1, plus listed versions 2.6.8-52.6.8-5sarge12.6.8-5sarge22.6.8-5sarge32.6.8-5sarge4 Show 4 moreShow less2.6.8-5sarge52.6.8-5sarge62.6.8-5sarge72.6.8-6 |
2.6.8-6sarge1 |
kernel-image-2.6.8-ia64Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-15sarge1, plus listed versions 2.6.8-142.6.8-14sarge12.6.8-14sarge22.6.8-14sarge32.6.8-14sarge4 Show 4 moreShow less2.6.8-14sarge52.6.8-14sarge62.6.8-14sarge72.6.8-15 |
2.6.8-15sarge1 |
fai-kernelsDebian:3.1 From an advisory covering 20 CVEs |
before 1.9.1sarge8, plus listed versions 1.9.11.9.1sarge11.9.1sarge21.9.1sarge31.9.1sarge4 Show 4 moreShow less1.9.1sarge51.9.1sarge61.9.1sarge71.9.1sarge7.1 |
1.9.1sarge8 |
kernel-image-2.6.8-amd64Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-17sarge1, plus listed versions 2.6.8-142.6.8-16sarge12.6.8-16sarge22.6.8-16sarge42.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 |
2.6.8-17sarge1 |
kernel-image-2.6.8-hppaDebian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-7sarge1, plus listed versions 2.6.8-62.6.8-6sarge12.6.8-6sarge22.6.8-6sarge32.6.8-6sarge4 Show 4 moreShow less2.6.8-6sarge52.6.8-6sarge62.6.8-6sarge72.6.8-7 |
2.6.8-7sarge1 |
kernel-image-2.6.8-sparcDebian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-16sarge1, plus listed versions 2.6.8-152.6.8-15sarge12.6.8-15sarge22.6.8-15sarge32.6.8-15sarge4 Show 4 moreShow less2.6.8-15sarge52.6.8-15sarge62.6.8-15sarge72.6.8-16 |
2.6.8-16sarge1 |
kernel-image-2.6.8-alphaDebian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 |
2.6.8-17sarge1 |
Show 79 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-image-2.6.8-i386Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 |
2.6.8-17sarge1 |
kernel-source-2.6.8Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 |
2.6.8-17sarge1 |
kernel-patch-powerpc-2.6.8Debian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-13sarge1, plus listed versions 2.6.8-122.6.8-12sarge12.6.8-12sarge22.6.8-12sarge32.6.8-12sarge4 Show 4 moreShow less2.6.8-12sarge52.6.8-12sarge62.6.8-12sarge72.6.8-13 |
2.6.8-13sarge1 |
kernel-image-2.6.8-m68kDebian:3.1 From an advisory covering 20 CVEs |
before 2.6.8-5sarge1, plus listed versions 2.6.8-42.6.8-4sarge12.6.8-4sarge22.6.8-4sarge32.6.8-4sarge4 Show 4 moreShow less2.6.8-4sarge52.6.8-4sarge62.6.8-4sarge72.6.8-5 |
2.6.8-5sarge1 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3740 is a medium vulnerability (CVSS 4.4) in Linux Kernel, published September 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.
References
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
secunia.com/advisories/27747
securityfocus.com/bid/25672
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9953
redhat.com/support/errata/RHSA-2007-0939.html
Show 84 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/36593
debian.org/security/2008/dsa-1504
support.avaya.com/elmodocs2/security/ASA-2007-474.htm
mandriva.com/security/advisories?name=MDVSA-2008:008
ubuntu.com/usn/usn-518-1
lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
bugzilla.redhat.com/show_bug.cgi?id=253314
nvd.nist.gov/vuln/detail/CVE-2007-3740
github.com/advisories/GHSA-5hfq-gm8x-g6p7
access.redhat.com/errata/RHSA-2007:0705
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0705.json
cve.org/CVERecord?id=CVE-2007-1217
kbase.redhat.com