CVE-2007-3850 : The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space.

Published 2007-10-23 10:46:00

Updated 2025-04-09 00:30:58

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2007-3850

Linux » Linux Kernel
Versions up to, including, (<=) 2.6.21
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Powerpc

Exploit prediction scoring system (EPSS) score for CVE-2007-3850

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 14 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3850

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N	3.4	2.9	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2007-3850

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-3850

Jump to

Vulnerability Details : CVE-2007-3850

Products affected by CVE-2007-3850

Exploit prediction scoring system (EPSS) score for CVE-2007-3850

CVSS scores for CVE-2007-3850

CWE ids for CVE-2007-3850

References for CVE-2007-3850