CVE-2014-7207: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6_select_ident function calls, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging (1) tun or (2) macvtap device access.

Affected products

• Linux Linux Kernel: version 3.2 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; version 3.2.4 only; version 3.2.5 only; …

Published 2014-11-10. Last modified 2026-06-17.