CVE-2007-0006: Linux Kernel

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The key serial number collision avoidance code in the key_alloc_serial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service (crash) via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."

Affected products

• Linux Linux Kernel: up to and including 2.6.20; version 2.6.9 only

Published 2007-02-06. Last modified 2026-06-16.