VULNERABILITY INTELLIGENCE
CVE-2007-3848
CVSS score1.9 LOW
EPSS probability0.36%
CISA KEVNot currently listed
Published2007-08-14
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:P
Description
Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).