CVE-2007-4573

The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.82% chance of exploitation in the next 30 days, 55th percentile

Published

2007-09-24

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/30604
• https://www.exploit-db.com/exploits/4460

References

• CVE Record
• NVD entry

Related

• CVE-2007-4571
• CVE-2007-4581
• CVE-2007-4567
• CVE-2007-4582
• CVE-2007-4566
• CVE-2007-4583