Vulnerability Description
The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that result in the process not being active during a clock interrupt, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | 2.4.0 |
References
- http://osvdb.org/37126
- http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf
- http://osvdb.org/37126
- http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf
FAQ
What is CVE-2007-3720?
CVE-2007-3720 is a vulnerability with a CVSS score of 2.1 (LOW). The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consump...
How severe is CVE-2007-3720?
CVE-2007-3720 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-3720?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.