CVE-2007-3850

Linux Kernel < 2.6.21 - Unauthorized Physical Memory Read via eHCA Driver

Title source: llm

Description

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space.

References (6)

Core 6

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27322

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/45488

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26161

Patch x_refsource_confirm

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=721151d004dcf01a71b12bb6b893f9160284cf6e

Patch vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2007-0940.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10793

Scores

EPSS 0.0034

EPSS Percentile 26.0%

Details

CWE

CWE-200

Status published

Products (1)

linux/linux_kernel < 2.6.21

Published Oct 23, 2007

Tracked Since Feb 18, 2026