Candidate: CVE-2007-5908 Description: *REJECTED* Buffer overflow in the (1) sysfs_show_available_clocksources and (2) sysfs_show_current_clocksources functions in Linux kernel 2.6.23 and earlier might allow local users to cause a denial of service or execute arbitrary code via crafted clock source names. References: http://marc.info/?l=linux-kernel&m=119451922608530&w=2 Ubuntu-Description: Notes: kees> this is not actually an exploitable security issue. there is no way to add clock sources that could trigger the overflow. Bugs: upstream: N/A linux-2.6: N/A 2.6.18-etch-security: N/A 2.6.8-sarge-security: N/A 2.4.27-sarge-security: N/A 2.6.15-dapper-security: N/A 2.6.17-edgy-security: N/A 2.6.20-feisty-security: N/A 2.6.22-gutsy-security: N/A