CVE-2007-3848

CVE-2007-3848 describes a vulnerability in Linux kernel 2.4.35 and other versions, allowing a local attacker to send arbitrary signals to a higher-privileged child process. This is achieved by causing a setuid-root parent process to terminate, which then delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG). The vulnerability has a low CVSS score of 1.9 (AV:L/AC:M/Au:N/C:N/I:N/A:P), indicating local access, medium attack complexity, no authentication required, and a partial impact on availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.