CVE-2007-4311
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35...
CVE-2007-4311 is a medium vulnerability (CVSS 6.8) in Linux Kernel, published August 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.73%, the 77th percentile. No source names a fixed version.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 1.73%EPSS, 77th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-latest-2.4-i386Debian:3.1 From an advisory covering 20 CVEs | before 101sarge2, plus listed versions 101101sarge1 | 101sarge2 |
kernel-image-2.4.27-alphaDebian:3.1 From an advisory covering 20 CVEs | before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 | 2.4.27-10sarge6 |
kernel-image-2.4.27-m68kDebian:3.1 From an advisory covering 20 CVEs | before 2.4.27-3sarge6, plus listed versions 2.4.27-32.4.27-3sarge12.4.27-3sarge22.4.27-3sarge32.4.27-3sarge42.4.27-3sarge5 | 2.4.27-3sarge6 |
i2cDebian:3.1 From an advisory covering 20 CVEs | before 1:2.9.1-1sarge2, plus listed versions 1:2.9.1-11:2.9.1-1sarge1 | 1:2.9.1-1sarge2 |
systemimagerDebian:3.1 From an advisory covering 20 CVEs | before 3.2.3-6sarge5, plus listed versions 3.2.3-63.2.3-6sarge13.2.3-6sarge23.2.3-6sarge33.2.3-6sarge4 | 3.2.3-6sarge5 |
kernel-latest-2.4-alphaDebian:3.1 From an advisory covering 20 CVEs | before 101sarge3, plus listed versions 101101sarge1 | 101sarge3 |
kernel-patch-powerpc-2.4.27Debian:3.1 From an advisory covering 20 CVEs | before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 | 2.4.27-10sarge6 |
kernel-latest-2.4-sparcDebian:3.1 From an advisory covering 20 CVEs | before 42sarge3, plus listed versions 4242sarge142sarge2 | 42sarge3 |
kernel-patch-2.4.27-mipsDebian:3.1 From an advisory covering 20 CVEs | before 2.4.27-10.sarge4.040815-3, plus listed versions 2.4.27-10.040815-12.4.27-10.sarge1.040815-12.4.27-10.sarge2.040815-12.4.27-10.sarge3.040815-12.4.27-10.sarge4.040815-12.4.27-10.sarge4.040815-2 | 2.4.27-10.sarge4.040815-3 |
pcmcia-modules-2.4.27-i386Debian:3.1 From an advisory covering 20 CVEs | before 3.2.5+2sarge2, plus listed versions 3.2.5+23.2.5+2sarge1 | 3.2.5+2sarge2 |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-image-2.4.27-ia64Debian:3.1 From an advisory covering 20 CVEs | before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 | 2.4.27-10sarge6 |
mindi-kernelDebian:3.1 From an advisory covering 20 CVEs | before 2.4.27-2sarge5, plus listed versions 2.4.27-22.4.27-2sarge12.4.27-2sarge22.4.27-2sarge32.4.27-2sarge4 | 2.4.27-2sarge5 |
kernel-latest-2.4-s390Debian:3.1 From an advisory covering 20 CVEs | before 2.4.27-1sarge2, plus listed versions 2.4.27-12.4.27-1sarge1 | 2.4.27-1sarge2 |
hostap-modules-i386Debian:3.1 From an advisory covering 20 CVEs | before 1:0.3.7-1sarge3, plus listed versions 1:0.3.7-11:0.3.7-1sarge11:0.3.7-1sarge2 | 1:0.3.7-1sarge3 |
kernel-image-speakup-i386Debian:3.1 From an advisory covering 20 CVEs | before 2.4.27-1.1sarge5, plus listed versions 2.4.27-1.12.4.27-1.1sarge12.4.27-1.1sarge22.4.27-1.1sarge32.4.27-1.1sarge4 | 2.4.27-1.1sarge5 |
kernel-source-2.4.27Debian:3.1 From an advisory covering 20 CVEs | before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 | 2.4.27-10sarge6 |
kernel-image-2.4.27-armDebian:3.1 From an advisory covering 20 CVEs | before 2.4.27-2sarge6, plus listed versions 2.4.27-22.4.27-2sarge12.4.27-2sarge22.4.27-2sarge32.4.27-2sarge42.4.27-2sarge5 | 2.4.27-2sarge6 |
kernel-image-2.4.27-i386Debian:3.1 From an advisory covering 20 CVEs | before 2.4.27-10sarge6, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge5 | 2.4.27-10sarge6 |
kernel-image-2.4.27-sparcDebian:3.1 From an advisory covering 20 CVEs | before 2.4.27-9sarge6, plus listed versions 2.4.27-92.4.27-9sarge12.4.27-9sarge22.4.27-9sarge32.4.27-9sarge42.4.27-9sarge5 | 2.4.27-9sarge6 |
kernel-image-2.4.27-s390Debian:3.1 From an advisory covering 20 CVEs | before 2.4.27-2sarge6, plus listed versions 2.4.27-22.4.27-2sarge12.4.27-2sarge22.4.27-2sarge32.4.27-2sarge42.4.27-2sarge5 | 2.4.27-2sarge6 |
kernel-source-2.4.27Debian:3.1 From an advisory covering 20 CVEs | before 2.4.27-10sarge7, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge32.4.27-10sarge42.4.27-10sarge52.4.27-10sarge6 | 2.4.27-10sarge7 |
What each source reports
NVD Score used
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
- Record
CVE-2007-4311- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE ListNo score
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
- Record
CVE-2007-4311- Updated
- 2026-11-02
EUVDEUVD-2007-4294No score
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
- Record
EUVD-2007-4294- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7p4g-p325-hv5mNo score
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35...
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
- Record
GHSA-7p4g-p325-hv5m- Updated
- 2026-11-02
OSVBELL-CVE-2007-4311
CVE-2007-4311 does not affect BellSoft software
- Record
BELL-CVE-2007-4311- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
git.kernel.org?p=linux/kernel/git/stable/linux-2.4.34.y.git%3Ba=commit%3Bh=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925
kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6
debian.org/security/2008/dsa-1503
secunia.com/advisories/29058
Show 7 moreShow less
vupen.com/english/advisories/2007/2690
securityfocus.com/bid/25029
nvd.nist.gov/vuln/detail/CVE-2007-4311
github.com/advisories/GHSA-7p4g-p325-hv5m
docs.bell-sw.com/security/cves/CVE-2007-4311