CVE-2007-0257: Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grse...

Description

Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code

Metrics

CVSS 3.1

7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

0.96%

57.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Grsecurity	Grsecurity Kernel Patch	1.9.4
Grsecurity	Grsecurity Kernel Patch	2.0.1
Grsecurity	Grsecurity Kernel Patch	2.0.2
Grsecurity	Grsecurity Kernel Patch	2.1.0
Grsecurity	Grsecurity Kernel Patch	2.1.1
Grsecurity	Grsecurity Kernel Patch	2.1.2
Grsecurity	Grsecurity Kernel Patch	2.1.3
Grsecurity	Grsecurity Kernel Patch	2.1.4
Grsecurity	Grsecurity Kernel Patch	2.1.5
Grsecurity	Grsecurity Kernel Patch	2.1.6
Grsecurity	Grsecurity Kernel Patch	2.1.7
Grsecurity	Grsecurity Kernel Patch	2.1.8

References

Timeline

Published: Jan 16, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-0257?

Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code

How severe is CVE-2007-0257?

CVE-2007-0257 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.96% probability of exploitation in the next 30 days.

How do I fix CVE-2007-0257?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.