What’s Vulnerable › Vulnerabilities

CVE-2007-4774

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-15 · updated 2026-06-16
• Weakness: CWE-362

Description

The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, which can can wake up a PTRACED process.

Affected products

• Linux kernel: through 2.4.35

References

• http://taviso.decsystem.org/research.html
• https://osdn.net/projects/linux-kernel-docs/scm/git/linux-2.4.36/listCommit?skip=60
• https://security.netapp.com/advisory/ntap-20200204-0002/
• http://taviso.decsystem.org/research.html
• https://osdn.net/projects/linux-kernel-docs/scm/git/linux-2.4.36/listCommit?skip=60
• https://security.netapp.com/advisory/ntap-20200204-0002/

Get alerted when CVE-2007-4774 or the next vulnerability affects your stack