Vulnerability Database

314,453

Total vulnerabilities in the database

CVE-2007-6417

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).

  • Published: Dec 18, 2007
  • Updated: Nov 9, 2025
  • CVE: CVE-2007-6417
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
linux / linux_kernel 2.6.11 2.6.11.x
linux / linux_kernel 2.6.21 2.6.21.x
linux / linux_kernel 2.6.13 2.6.13.x
linux / linux_kernel 2.6.14 2.6.14.x
linux / linux_kernel 2.6.22 2.6.22.x
linux / linux_kernel 2.6.17 2.6.17.x
linux / linux_kernel 2.6.20 2.6.20.x
linux / linux_kernel 2.6.19 2.6.19.x
linux / linux_kernel 2.6.16 2.6.16.x
linux / linux_kernel 2.6.23 2.6.23.x
linux / linux_kernel 2.6.15 2.6.15.x
linux / linux_kernel 2.6.18 2.6.18.x
linux / linux_kernel 2.6.12 2.6.12.x