CVE-2007-3850

Published: Oct 23, 2007Modified: Apr 23, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.21

Running on/with	Platform Versions
Apple Powerpc	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=721151d004dcf01a71b12bb6b893f9160284cf6e

Source: secalert@redhat.com

http://osvdb.org/45488

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2007-0940.html

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/27322

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26161

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10793

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=721151d004dcf01a71b12bb6b893f9160284cf6e