{"id":"CVE-2007-3732","aliases":["EUVD-2007-3716","GHSA-6732-cc4q-jp7r","UBUNTU-CVE-2007-3732"],"status":"published","title":"In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without...","description":"In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that \"current\" references work. Without this, \"current\" used in the window between iret_exc and the middle of error_code where %fs is reset, would crash.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00378,"percentile":0.31971,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-11-07T21:31:50Z","modified":"2026-06-16T22:42:36Z","products":[{"vendor":"linux","product":"linux_kernel"},{"vendor":"linux-2.6","product":"linux-2.6"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2007-3732","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-3732","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/cve-2007-3732","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3732"},{"url":"https://github.com/advisories/GHSA-6732-cc4q-jp7r"},{"url":"https://ubuntu.com/security/CVE-2007-3732","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-3732","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2007-3732","description":"In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that \"current\" references work. Without this, \"current\" used in the window between iret_exc and the middle of error_code where %fs is reset, would crash.","status":"published","published":"2019-11-07T21:31:50Z","modified":"2024-08-07T14:28:52.054Z","updated_at":"2026-11-02T13:32:45.563938Z"}],"euvd":[{"id":"EUVD-2007-3716","description":"In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that \"current\" references work. Without this, \"current\" used in the window between iret_exc and the middle of error_code where %fs is reset, would crash.","status":"published","published":"2019-11-07T21:31:50Z","modified":"2024-08-07T14:28:52Z","updated_at":"2026-11-03T01:16:24.965758Z"}],"ghsa":[{"id":"GHSA-6732-cc4q-jp7r","title":"In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without...","description":"In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that \"current\" references work. Without this, \"current\" used in the window between iret_exc and the middle of error_code where %fs is reset, would crash.","status":"published","published":"2022-04-21T01:48:50Z","modified":"2023-01-27T05:01:49Z","updated_at":"2026-11-02T14:41:58.364763Z"}],"nvd":[{"id":"CVE-2007-3732","description":"In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that \"current\" references work. Without this, \"current\" used in the window between iret_exc and the middle of error_code where %fs is reset, would crash.","status":"published","published":"2019-11-07T22:15:10.07Z","modified":"2026-06-16T22:42:36.963Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:01:24.391698Z"}],"osv":[{"id":"UBUNTU-CVE-2007-3732","description":"In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that \"current\" references work. Without this, \"current\" used in the window between iret_exc and the middle of error_code where %fs is reset, would crash.","status":"withdrawn","published":"2019-11-07T22:15:00Z","modified":"2025-07-16T07:02:08.24029Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:05.838224Z"}]}}