CVE-2007-4573
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7,...
7.2 HighPublic exploitFix available
CVE-2007-4573 is a high vulnerability (CVSS 7.2) in Linux Kernel, published September 24, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.82%, the 57th percentile. Fixed in kernel 0:2.6.18-8.1.14.el5.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.82%EPSS, 57th percentile
- Exploitation
- None known2 public exploits
- Fixed in
0:2.6.18-8.1.14.el5kernel +127 more
Description
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
Exploit likelihood
0.82%Down 3.2 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:4.0 From an advisory covering 5 CVEs | before 2.6.18.dfsg.1-13etch3, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch12.6.18.dfsg.1-13etch2 | 2.6.18.dfsg.1-13etch3 |
fai-kernelsDebian:4.0 From an advisory covering 5 CVEs | before 1.17+etch.13etch3, plus listed versions 1.171.17+etch11.17+etch21.17+etch31.17+etch41.17+etch51.17etch1 | 1.17+etch.13etch3 |
user-mode-linuxDebian:4.0 From an advisory covering 5 CVEs | before 2.6.18-1um-2etch.13etch3, plus listed versions 2.6.18-1um-22.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4 | 2.6.18-1um-2etch.13etch3 |
linux-2.6Debian:4.0 From an advisory covering 4 CVEs | before 2.6.18.dfsg.1-13etch4, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch12.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch3 | 2.6.18.dfsg.1-13etch4 |
kernel-image-2.6.8-s390Debian:3.1 From an advisory covering 20 CVEs | before 2.6.8-6sarge1, plus listed versions 2.6.8-52.6.8-5sarge12.6.8-5sarge22.6.8-5sarge32.6.8-5sarge4 Show 4 moreShow less2.6.8-5sarge52.6.8-5sarge62.6.8-5sarge72.6.8-6 | 2.6.8-6sarge1 |
kernel-image-2.6.8-ia64Debian:3.1 From an advisory covering 20 CVEs | before 2.6.8-15sarge1, plus listed versions 2.6.8-142.6.8-14sarge12.6.8-14sarge22.6.8-14sarge32.6.8-14sarge4 Show 4 moreShow less2.6.8-14sarge52.6.8-14sarge62.6.8-14sarge72.6.8-15 | 2.6.8-15sarge1 |
fai-kernelsDebian:3.1 From an advisory covering 20 CVEs | before 1.9.1sarge8, plus listed versions 1.9.11.9.1sarge11.9.1sarge21.9.1sarge31.9.1sarge4 Show 4 moreShow less1.9.1sarge51.9.1sarge61.9.1sarge71.9.1sarge7.1 | 1.9.1sarge8 |
kernel-image-2.6.8-amd64Debian:3.1 From an advisory covering 20 CVEs | before 2.6.8-17sarge1, plus listed versions 2.6.8-142.6.8-16sarge12.6.8-16sarge22.6.8-16sarge42.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 | 2.6.8-17sarge1 |
kernel-image-2.6.8-hppaDebian:3.1 From an advisory covering 20 CVEs | before 2.6.8-7sarge1, plus listed versions 2.6.8-62.6.8-6sarge12.6.8-6sarge22.6.8-6sarge32.6.8-6sarge4 Show 4 moreShow less2.6.8-6sarge52.6.8-6sarge62.6.8-6sarge72.6.8-7 | 2.6.8-7sarge1 |
kernel-image-2.6.8-sparcDebian:3.1 From an advisory covering 20 CVEs | before 2.6.8-16sarge1, plus listed versions 2.6.8-152.6.8-15sarge12.6.8-15sarge22.6.8-15sarge32.6.8-15sarge4 Show 4 moreShow less2.6.8-15sarge52.6.8-15sarge62.6.8-15sarge72.6.8-16 | 2.6.8-16sarge1 |
Show 118 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-image-2.6.8-alphaDebian:3.1 From an advisory covering 20 CVEs | before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 | 2.6.8-17sarge1 |
kernel-image-2.6.8-i386Debian:3.1 From an advisory covering 20 CVEs | before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 | 2.6.8-17sarge1 |
kernel-source-2.6.8Debian:3.1 From an advisory covering 20 CVEs | before 2.6.8-17sarge1, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 Show 4 moreShow less2.6.8-16sarge52.6.8-16sarge62.6.8-16sarge72.6.8-17 | 2.6.8-17sarge1 |
kernel-patch-powerpc-2.6.8Debian:3.1 From an advisory covering 20 CVEs | before 2.6.8-13sarge1, plus listed versions 2.6.8-122.6.8-12sarge12.6.8-12sarge22.6.8-12sarge32.6.8-12sarge4 Show 4 moreShow less2.6.8-12sarge52.6.8-12sarge62.6.8-12sarge72.6.8-13 | 2.6.8-13sarge1 |
kernel-image-2.6.8-m68kDebian:3.1 From an advisory covering 20 CVEs | before 2.6.8-5sarge1, plus listed versions 2.6.8-42.6.8-4sarge12.6.8-4sarge22.6.8-4sarge32.6.8-4sarge4 Show 4 moreShow less2.6.8-4sarge52.6.8-4sarge62.6.8-4sarge72.6.8-5 | 2.6.8-5sarge1 |
kernelRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-PAERed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-develRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-docRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-xenRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernelRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-PAERed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-docRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-xenRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-8.1.14.el5 | 0:2.6.18-8.1.14.el5 |
kernelRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-develRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-docRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-hugememRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-smpRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-xenURed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernelRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-develRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-docRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernelRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-develRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-docRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-hugememRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-smpRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-xenURed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernelRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-develRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-docRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-smpRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-xenURed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws | before 0:2.6.9-55.0.9.EL | 0:2.6.9-55.0.9.EL |
kernelRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-docRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-hugememRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-smpRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-sourceRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernelRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-docRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernelRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-docRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-hugememRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-smpRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-sourceRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernelRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-docRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-smpRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws | before 0:2.4.21-52.EL | 0:2.4.21-52.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.x - Ptrace Privilege Escalation | 2007-09-21 |
| Exploit-DB | Linux Kernel 2.4/2.6 (x86-64) - System Call Emulation Privilege Escalation | 2007-09-27 |
What each source reports
NVD Score used
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
- Record
CVE-2007-4573- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
- Record
CVE-2007-4573- Updated
- 2026-11-02
EUVDEUVD-2007-4555No score
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
- Record
EUVD-2007-4555- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jqfp-qwq6-6w3hNo score
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7,...
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
- Record
GHSA-jqfp-qwq6-6w3h- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2007-0937.html
secunia.com/advisories/27212
novell.com/linux/security/advisories/2007_53_kernel.html
securitytracker.com/id?1018748
Show 46 moreShow less
fedoranews.org/updates/FEDORA-2007-229.shtml
securityfocus.com/archive/1/480451/100/0/threaded
lkml.org/lkml/2007/9/21/512
debian.org/security/2008/dsa-1504
mandriva.com/security/advisories?name=MDVSA-2008:008
ubuntu.com/usn/usn-518-1
vupen.com/english/advisories/2007/3246
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9735
marc.info?l=full-disclosure&m=119062587407908&w=2
kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3
lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
issues.rpath.com/browse/RPL-1754
nvd.nist.gov/vuln/detail/CVE-2007-4573
github.com/advisories/GHSA-jqfp-qwq6-6w3h
access.redhat.com/errata/RHSA-2007:0936
bugzilla.redhat.com/show_bug.cgi?id=294541
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0936.json
cve.org/CVERecord?id=CVE-2007-4573