CVE-2007-3850

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-23 · updated 2026-06-16
Weakness: CWE-200

Description

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space.

Affected products

Linux kernel: through 2.6.21

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=721151d004dcf01a71b12bb6b893f9160284cf6e
http://osvdb.org/45488
http://rhn.redhat.com/errata/RHSA-2007-0940.html
http://secunia.com/advisories/27322
http://www.securityfocus.com/bid/26161
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10793
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=721151d004dcf01a71b12bb6b893f9160284cf6e
http://osvdb.org/45488
http://rhn.redhat.com/errata/RHSA-2007-0940.html
http://secunia.com/advisories/27322
http://www.securityfocus.com/bid/26161
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10793

Get alerted when CVE-2007-3850 or the next vulnerability affects your stack