CVE-2007-6434: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Linux kernel 2.6.23 allows local users to create low pages in virtual userspace memory and bypass mmap_min_addr protection via a crafted executable file that calls the do_brk function.

Affected products

• Linux Linux Kernel: version 2.6.23 only

Published 2007-12-18. Last modified 2026-06-16.