CVE-2007-4774

The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, which can can wake up a PTRACED process.

Score

CVSS 3.1 5.9 Medium

Status

Modified - cve@mitre.org

Published

2020-01-15

Last modified

2024-08-07

Weaknesses

CWE-362

Affected products

• Linux Kernel (Linux)

References

• http://taviso.decsystem.org/research.html
• https://osdn.net/projects/linux-kernel-docs/scm/git/linux-2.4.36/listCommit?skip=60
• https://security.netapp.com/advisory/ntap-20200204-0002/