High severity7.8NVD Advisory· Published Jan 16, 2007· Updated Jun 16, 2026
CVE-2007-0257
CVE-2007-0257
Description
Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:grsecurity:grsecurity_kernel_patch:1.9.4:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:1.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.1.8:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
13- forums.grsecurity.net/viewtopic.phpnvdVendor Advisory
- www.digitalarmaments.com/news_news.shtmlnvdVendor AdvisoryURL Repurposed
- www.digitalarmaments.com/pre2007-00018659.htmlnvdVendor AdvisoryURL Repurposed
- grsecurity.net/news.phpnvd
- osvdb.org/32727nvd
- secunia.com/advisories/23713nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/456626/100/0/threadednvd
- www.securityfocus.com/archive/1/456722/100/0/threadednvd
- www.securityfocus.com/archive/1/457509/100/0/threadednvd
- www.securityfocus.com/archive/1/462302/100/100/threadednvd
- www.securityfocus.com/bid/22014nvd
- www.vupen.com/english/advisories/2007/0155nvd
News mentions
0No linked articles in our index yet.