Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.9 allows local users to cause a denial of service (kernel panic) by replacing a watched file, which does not cause the watch on the old inode to be dropped.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2007-0001 | A security watcher that crashes the system Imagine a guard tracking a room that has already been replaced. In RHEL 4, replacing an audited file could leave a stale watch and trigger a kernel panic. Even security monitoring can contain security bugs.
This affected the file-watch implementation in the RHEL 4 kernel's audit subsystem. A local user could cause denial of service. The record does not claim data theft or code execution. Lesson: patch security components too. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2007/0xxx/CVE-2007-0001.json
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | redhat | enterprise_linux | 4.0 | - | - |