Every CVE Search/ Get API key

CVE-2007-6417

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly...

7.2 HighFix available

CVE-2007-6417 is a high vulnerability (CVSS 7.2) in Linux Kernel, published December 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in linux-2.6 2.6.18.dfsg.1-13etch6.

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).

Exploit likelihood

0.39%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).

Record
CVE-2007-6417
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-200, CWE-399
Updated
2026-11-02
CVE List No score

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).

Record
CVE-2007-6417
Updated
2026-11-02
EUVDEUVD-2007-6383 No score

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).

Record
EUVD-2007-6383
Updated
2026-11-03
GitHub AdvisoriesGHSA-j867-w6rm-vgp2 No score

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly...

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).

Record
GHSA-j867-w6rm-vgp2
Weakness
CWE-200
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-2.6
Debian:4.0
 before 2.6.18.dfsg.1-13etch6, plus listed versions
2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1
Show 4 moreShow less
2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch5
2.6.18.dfsg.1-13etch6
fai-kernels
Debian:4.0
 before 1.17+etch.13etch6, plus listed versions
1.171.17+etch.13etch31.17+etch.13etch41.17+etch.13etch51.17+etch1
Show 5 moreShow less
1.17+etch21.17+etch31.17+etch41.17+etch51.17etch1
1.17+etch.13etch6
user-mode-linux
Debian:4.0
 before 2.6.18-1um-2etch.13etch6, plus listed versions
2.6.18-1um-22.6.18-1um-2etch.13etch32.6.18-1um-2etch.13etch42.6.18-1um-2etch.13etch52.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4
2.6.18-1um-2etch.13etch6
kernel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-PAE
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debug
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
Show 26 moreShow less
Affected packages
PackageAffectedFixed
kernel-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-doc
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-headers
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-xen
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debug
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-doc
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-headers
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-xen
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-92.1.13.el5
0:2.6.18-92.1.13.el5

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02affected, aliases, facts, references, titleGitHub Advisories, OSV
2026-11-02createdCVE List, NVD

References

Show 51 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open