VULNERABILITY INTELLIGENCE

CVE-2007-4133

CVSS score4.7 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2007-10-04
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:C

Description

The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors.

Primary references