CVE-2007-3107

Description

The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.

2.1

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.09%

Vendor Advisory redhat.com Vendor Advisory novell.com Vendor Advisory novell.com Vendor Advisory ubuntu.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory securitytracker.com

Affected: n/a n/a

References

Link	Tags
http://www.redhat.com/support/errata/RHSA-2007-0595.html	patch vendor advisory
http://secunia.com/advisories/25955	third party advisory vendor advisory
http://secunia.com/advisories/27227	third party advisory vendor advisory
http://secunia.com/advisories/26664	third party advisory vendor advisory
http://www.novell.com/linux/security/advisories/2007_51_kernel.html	vendor advisory
http://www.novell.com/linux/security/advisories/2007_53_kernel.html	vendor advisory
http://osvdb.org/37118	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9936	vdb entry signature
http://secunia.com/advisories/28706	third party advisory vendor advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245580
http://www.securityfocus.com/bid/24845	vdb entry
http://www.securitytracker.com/id?1018347	vdb entry vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/35383	vdb entry
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
http://www.ubuntu.com/usn/usn-574-1	vendor advisory
http://secunia.com/advisories/25963	third party advisory patch vendor advisory

Frequently Asked Questions

What is the severity of CVE-2007-3107?: CVE-2007-3107 has been scored as a low severity vulnerability.
How to fix CVE-2007-3107?: To fix CVE-2007-3107, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-3107 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2007-3107 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.