CVE-2007-1730: Linux Kernel

Medium severity, CVSS 6.6. EPSS: 0.8% chance of exploitation in the next 30 days.

Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local users to read kernel memory or cause a denial of service (oops) via a negative optlen value.

Affected products

• Linux Linux Kernel: version 2.6.20 only; version 2.6.20.1 only; version 2.6.20.2 only

Published 2007-03-28. Last modified 2026-06-16.