VYPR
Unrated severityNVD Advisory· Published Jul 12, 2007· Updated Jun 16, 2026

CVE-2007-3720

CVE-2007-3720

Description

The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that result in the process not being active during a clock interrupt, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."

Affected products

2
  • Linux/Kernel2 versions
    cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*
    • (no CPE)range: 2.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.