lost fput in a 32-bit ioctl on 64-bit x86 systems

🗓️ 25 Jun 2007 17:50:00Reported by RedHatType

Local users can cause a kernel oops from a null dereference in fput during a 32-bit ioctl on 64-bit x86 in older Red Hat kernels.

Reporter	Title	Published	Views	Family All 42
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	ia64	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.ppc64.rpm
Red Hat Enterprise Linux	4	s390	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.s390.rpm
Red Hat Enterprise Linux	4	s390x	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.x86_64.rpm
Red Hat Enterprise Linux	4	any	kernel	0:2.6.9-55.0.2.EL.i686	kernel-0:2.6.9-55.0.2.EL.i686.noarch.rpm
Red Hat Enterprise Linux	4	any	kernel	0:2.6.9-55.0.2.EL.ppc64iseries	kernel-0:2.6.9-55.0.2.EL.ppc64iseries.noarch.rpm
Red Hat Enterprise Linux	4	ia64	kernel-debuginfo	0:2.6.9-55.0.2.EL	kernel-debuginfo-0:2.6.9-55.0.2.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel-debuginfo	0:2.6.9-55.0.2.EL	kernel-debuginfo-0:2.6.9-55.0.2.EL.ppc64.rpm
Red Hat Enterprise Linux	4	s390	kernel-debuginfo	0:2.6.9-55.0.2.EL	kernel-debuginfo-0:2.6.9-55.0.2.EL.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2007-0773
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2007-0773
cve	www.cve.org/CVERecord

25 Jun 2026 10:33Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.6

EPSS0.00328