CVE-2007-6694 Null dereference in n/a
Local attackers can crash the Linux kernel on PowerPC systems via a NULL pointer dereference in the CPU info display function.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-6694?
CVE-2007-6694 is a high-severity vulnerability in Linux kernel, published on 29 Jan 2008. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference.
Weakness: CWE-399
Which versions are affected by CVE-2007-6694?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2007-6694?
Apply the vendor's patch.
Is CVE-2007-6694 being exploited?
There is no known exploitation of CVE-2007-6694 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-j22x-whv2-v2w4.