CVE-2007-6599: Debian Linux

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock.

Affected products

• Debian Debian Linux: version 3.1 only; version 4.0 only
• Openafs Openafs: from 1.3.50, up to and including 1.4.5; from 1.5.0, up to and including 1.5.27

Published 2008-01-04. Last modified 2026-06-16.