CVE-2007-1734: Linux Kernel

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify the upper bounds of the optlen value, which allows local users running on certain architectures to read kernel memory or cause a denial of service (oops), a related issue to CVE-2007-1730.

Affected products

• Linux Linux Kernel: version 2.6.20 only; version 2.6.20.1 only; version 2.6.20.2 only

Published 2007-03-28. Last modified 2026-06-16.