Description
The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.
Published: 2007-11-20
Score: 4.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-1428-2 New Linux 2.6.18 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1481-1 New Linux 2.6.18 packages fix several vulnerabilities
EUVD EUVD EUVD-2007-5475 The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.
Ubuntu USN Ubuntu USN USN-558-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-574-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-578-1 Linux kernel vulnerabilities
References
Link Providers
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.23.y.git%3Ba=commitdiff%3Bh=36ef66c5d137b9a31fd8c35d236fb9e26ef74f97 cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2008-0055.html cve-icon cve-icon
http://secunia.com/advisories/27664 cve-icon cve-icon
http://secunia.com/advisories/27703 cve-icon cve-icon
http://secunia.com/advisories/27888 cve-icon cve-icon
http://secunia.com/advisories/27919 cve-icon cve-icon
http://secunia.com/advisories/27922 cve-icon cve-icon
http://secunia.com/advisories/28033 cve-icon cve-icon
http://secunia.com/advisories/28170 cve-icon cve-icon
http://secunia.com/advisories/28706 cve-icon cve-icon
http://secunia.com/advisories/28748 cve-icon cve-icon
http://secunia.com/advisories/28971 cve-icon cve-icon
http://secunia.com/advisories/29245 cve-icon cve-icon
http://secunia.com/advisories/30818 cve-icon cve-icon
http://secunia.com/advisories/30962 cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1428 cve-icon cve-icon
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2007_63_kernel.html cve-icon cve-icon
http://www.securityfocus.com/bid/26477 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-558-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-574-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-578-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3902 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/38547 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1965 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-5500 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9868 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-5500 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00032.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00170.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00302.html cve-icon cve-icon
History

No history.

Subscriptions

Linux Linux Kernel
Redhat Enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-07T15:31:59.003Z

Reserved: 2007-10-17T00:00:00.000Z

Link: CVE-2007-5500

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-11-20T02:46:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2007-5500

cve-icon Redhat

Severity : Important

Publid Date: 2007-11-16T00:00:00Z

Links: CVE-2007-5500 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses