CVE-2007-3105

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-27 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering". NOTE: this issue might only cross privilege boundaries in environments that have granular assignment of privileges for root.

Affected products

Linux kernel: through 2.6.22

References

http://secunia.com/advisories/26500
http://secunia.com/advisories/26643
http://secunia.com/advisories/26647
http://secunia.com/advisories/26651
http://secunia.com/advisories/26664
http://secunia.com/advisories/27212
http://secunia.com/advisories/27227
http://secunia.com/advisories/27322
http://secunia.com/advisories/27436
http://secunia.com/advisories/27747
http://secunia.com/advisories/29058
http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm

Get alerted when CVE-2007-3105 or the next vulnerability affects your stack