CVE-2007-4311
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35...
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
Exploit likelihood
What each source reports
NVD Score used
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
- Record
CVE-2007-4311- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
- Record
CVE-2007-4311- Updated
- 2026-11-02
EUVDEUVD-2007-4294 No score
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
- Record
EUVD-2007-4294- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7p4g-p325-hv5m No score
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35...
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
- Record
GHSA-7p4g-p325-hv5m- Updated
- 2026-11-02
OSVBELL-CVE-2007-4311
CVE-2007-4311 does not affect BellSoft software
- Record
BELL-CVE-2007-4311- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-latest-2.4-i386Debian:3.1 From an advisory covering 20 CVEs |
before 101sarge2, plus listed versions 101101sarge1 |
101sarge2 |
kernel-image-2.4.27-alphaDebian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 |
2.4.27-10sarge6 |
kernel-image-2.4.27-m68kDebian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-3sarge6, plus listed versions 2.4.27-32.4.27-3sarge12.4.27-3sarge22.4.27-3sarge32.4.27-3sarge42.4.27-3sarge5 |
2.4.27-3sarge6 |
i2cDebian:3.1 From an advisory covering 20 CVEs |
before 1:2.9.1-1sarge2, plus listed versions 1:2.9.1-11:2.9.1-1sarge1 |
1:2.9.1-1sarge2 |
systemimagerDebian:3.1 From an advisory covering 20 CVEs |
before 3.2.3-6sarge5, plus listed versions 3.2.3-63.2.3-6sarge13.2.3-6sarge23.2.3-6sarge33.2.3-6sarge4 |
3.2.3-6sarge5 |
kernel-latest-2.4-alphaDebian:3.1 From an advisory covering 20 CVEs |
before 101sarge3, plus listed versions 101101sarge1 |
101sarge3 |
kernel-patch-powerpc-2.4.27Debian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 |
2.4.27-10sarge6 |
kernel-latest-2.4-sparcDebian:3.1 From an advisory covering 20 CVEs |
before 42sarge3, plus listed versions 4242sarge142sarge2 |
42sarge3 |
kernel-patch-2.4.27-mipsDebian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-10.sarge4.040815-3, plus listed versions 2.4.27-10.040815-12.4.27-10.sarge1.040815-12.4.27-10.sarge2.040815-12.4.27-10.sarge3.040815-12.4.27-10.sarge4.040815-12.4.27-10.sarge4.040815-2 |
2.4.27-10.sarge4.040815-3 |
pcmcia-modules-2.4.27-i386Debian:3.1 From an advisory covering 20 CVEs |
before 3.2.5+2sarge2, plus listed versions 3.2.5+23.2.5+2sarge1 |
3.2.5+2sarge2 |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-image-2.4.27-ia64Debian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 |
2.4.27-10sarge6 |
mindi-kernelDebian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-2sarge5, plus listed versions 2.4.27-22.4.27-2sarge12.4.27-2sarge22.4.27-2sarge32.4.27-2sarge4 |
2.4.27-2sarge5 |
kernel-latest-2.4-s390Debian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-1sarge2, plus listed versions 2.4.27-12.4.27-1sarge1 |
2.4.27-1sarge2 |
hostap-modules-i386Debian:3.1 From an advisory covering 20 CVEs |
before 1:0.3.7-1sarge3, plus listed versions 1:0.3.7-11:0.3.7-1sarge11:0.3.7-1sarge2 |
1:0.3.7-1sarge3 |
kernel-image-speakup-i386Debian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-1.1sarge5, plus listed versions 2.4.27-1.12.4.27-1.1sarge12.4.27-1.1sarge22.4.27-1.1sarge32.4.27-1.1sarge4 |
2.4.27-1.1sarge5 |
kernel-source-2.4.27Debian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 |
2.4.27-10sarge6 |
kernel-image-2.4.27-armDebian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-2sarge6, plus listed versions 2.4.27-22.4.27-2sarge12.4.27-2sarge22.4.27-2sarge32.4.27-2sarge42.4.27-2sarge5 |
2.4.27-2sarge6 |
kernel-image-2.4.27-i386Debian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 |
2.4.27-10sarge6 |
kernel-image-2.4.27-sparcDebian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-9sarge6, plus listed versions 2.4.27-92.4.27-9sarge12.4.27-9sarge22.4.27-9sarge32.4.27-9sarge42.4.27-9sarge5 |
2.4.27-9sarge6 |
kernel-image-2.4.27-s390Debian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-2sarge6, plus listed versions 2.4.27-22.4.27-2sarge12.4.27-2sarge22.4.27-2sarge32.4.27-2sarge42.4.27-2sarge5 |
2.4.27-2sarge6 |
kernel-source-2.4.27Debian:3.1 From an advisory covering 20 CVEs |
before 2.4.27-10sarge7, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge52.4.27-10sarge6 |
2.4.27-10sarge7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4311 is a medium vulnerability (CVSS 6.8) in Linux Kernel, published August 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.73%, the 77th percentile. No source names a fixed version.
References
git.kernel.org?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925
kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6
debian.org/security/2008/dsa-1503
secunia.com/advisories/29058
Show 7 moreShow less
vupen.com/english/advisories/2007/2690
securityfocus.com/bid/25029
nvd.nist.gov/vuln/detail/CVE-2007-4311
github.com/advisories/GHSA-7p4g-p325-hv5m
docs.bell-sw.com/security/cves/CVE-2007-4311