CVE-2007-3848

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-14 · updated 2026-06-16

Description

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

Affected products

Linux kernel: through 2.4.35

References

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3848
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html
http://marc.info/?l=bugtraq&m=118711306802632&w=2
http://marc.info/?l=openwall-announce&m=118710356812637&w=2
http://secunia.com/advisories/26450
http://secunia.com/advisories/26500
http://secunia.com/advisories/26643
http://secunia.com/advisories/26651
http://secunia.com/advisories/26664
http://secunia.com/advisories/27212
http://secunia.com/advisories/27227

Get alerted when CVE-2007-3848 or the next vulnerability affects your stack