Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-2878

22
FAUCET Score

CVE-2007-2878 describes a local denial-of-service vulnerability in the Linux kernel prior to version 2.6.21.2, specifically affecting 64-bit systems. Local users can exploit VFAT compat ioctls to corrupt a kernel_dirent structure, leading to a system crash. This vulnerability has a CVSS score of 4.9, indicating a low attack complexity and requiring local access, with the primary impact being system availability. While exploit code exists on ExploitDB, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
2.6.21.1CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.9MEDIUM

AV:L/AC:L/Au:N/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.88%
Probability of exploitation in next 30 days
EPSS Percentile
55.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-30080 · May 24, 2007
This CVE's current EPSS score of 0.0088 is in the 88th percentile among its peer group of 3,050 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: kernel-0:2.6.9-55.0.12.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel-0:2.6.18-8.1.10.el5
View patch

Vendor Advisories (1)

redhatCVE-2007-2878Important

VFAT compat ioctls DoS on 64-bit

May 8, 2007

References

osvdb.org / 35926
secunia.com / advisories/25505
secunia.com / advisories/26133
secunia.com / advisories/26139
secunia.com / advisories/26760
secunia.com / advisories/27436
secunia.com / advisories/27747
secunia.com / advisories/28626
exchange.xforce.ibmcloud.com / vulnerabilities/34669
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11674
support.avaya.com / elmodocs2/security/ASA-2007-474.htm
debian.org / security/2008/dsa-1479
kernel.org / pub/linux/kernel/v2.6/ChangeLog-2.6.21.2
redhat.com / support/errata/RHSA-2007-0705.html
redhat.com / support/errata/RHSA-2007-0939.html
securityfocus.com / bid/24134
ExploitPatch
ubuntu.com / usn/usn-486-1
ubuntu.com / usn/usn-489-1
ubuntu.com / usn/usn-510-1
vupen.com / english/advisories/2007/2023