Linux · Linux Kernel · CVE-2007-3642
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 2.6.20.15
Linux kernel versions 2.6.21.x prior to 2.6.21.6
Linux kernel versions prior to 2.6.22
**Description**
The issue allows remote attackers to cause a denial of service, resulting in a system crash. This is achieved by providing an encoded, out-of-range index value for a choice field, which triggers a NULL pointer dereference in the decode choice function.
**Recommendations**
For Linux kernel versions prior to 2.6.20.15, update to version 2.6.20.15 or later.
For Linux kernel versions 2.6.21.x prior to 2.6.21.6, update to version 2.6.21.6 or later.
For Linux kernel versions prior to 2.6.22, update to version 2.6.22 or later.