CVE-2007-3848: Linux Kernel

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

Affected products

• Linux Linux Kernel: up to and including 2.4.35

Published 2007-08-14. Last modified 2026-06-16.