Every CVESearch/Get API key

CVE-2007-6712

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when...

4.9 Medium

CVE-2007-6712 is a medium vulnerability (CVSS 4.9) in Kernel Linux Kernel, published April 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.

What does this mean?
Severity
4.9 MediumCVSS 2.0, NVD
Exploit chance
0.39%EPSS, 33rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.

Exploit likelihood

0.39%Down 1.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-2.6
Debian:4.0
From an advisory covering 4 CVEs
before 2.6.18.dfsg.1-18etch5, plus listed versions
2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1
Show 15 moreShow less
2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-172.6.18.dfsg.1-17etch12.6.18.dfsg.1-182.6.18.dfsg.1-18etch12.6.18.dfsg.1-18etch32.6.18.dfsg.1-18etch4
2.6.18.dfsg.1-18etch5
fai-kernels
Debian:4.0
From an advisory covering 4 CVEs
before 1.17+etch.18etch5, plus listed versions
1.171.17+etch.13etch31.17+etch.13etch41.17+etch.13etch51.17+etch.13etch6
Show 13 moreShow less
1.17+etch.161.17+etch.171.17+etch.17etch11.17+etch.18etch11.17+etch.18etch21.17+etch.18etch31.17+etch.18etch41.17+etch11.17+etch21.17+etch31.17+etch41.17+etch51.17etch1
1.17+etch.18etch5
user-mode-linux
Debian:4.0
From an advisory covering 4 CVEs
before 2.6.18-1um-2etch.18etch5, plus listed versions
2.6.18-1um-22.6.18-1um-2etch.13etch32.6.18-1um-2etch.13etch42.6.18-1um-2etch.13etch52.6.18-1um-2etch.13etch6
Show 11 moreShow less
2.6.18-1um-2etch.162.6.18-1um-2etch.172.6.18-1um-2etch.17etch12.6.18-1um-2etch.18etch12.6.18-1um-2etch.18etch22.6.18-1um-2etch.18etch32.6.18-1um-2etch.18etch42.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4
2.6.18-1um-2etch.18etch5
kernel
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-PAE
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debug
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
Show 40 moreShow less
Affected packages
PackageAffectedFixed
kernel-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-headers
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-xen
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debug
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-headers
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-xen
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:2.6.18-53.1.21.el5
0:2.6.18-53.1.21.el5
kernel-rt
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-debug
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-debug-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-debug-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-debuginfo-common
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-doc
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-trace
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-trace-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-trace-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-vanilla
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-vanilla-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt
kernel-rt-vanilla-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 9 CVEs
before 0:2.6.24.7-74.el5rt
0:2.6.24.7-74.el5rt

What each source reports

NVD Score used4.9

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.

Record
CVE-2007-6712
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.

Record
CVE-2007-6712
Updated
2026-11-02
EUVDEUVD-2007-6676No score

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.

Record
EUVD-2007-6676
Updated
2026-11-03
GitHub AdvisoriesGHSA-g8gq-4rhw-xpq5No score

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when...

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.

Record
GHSA-g8gq-4rhw-xpq5
Updated
2026-11-02
OSVBELL-CVE-2007-67124.9

CVE-2007-6712 does not affect BellSoft software

Record
BELL-CVE-2007-6712
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 71 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open