CVE-2007-5966: Linux Kernel

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information.

Affected products

• Linux Linux Kernel: version 2.6.23 only; version 2.6.23.1 only; version 2.6.23.2 only; version 2.6.23.3 only; version 2.6.23.4 only; version 2.6.23.5 only; …

Published 2007-12-20. Last modified 2026-06-16.