CVE-2007-2480

Linux kernel <2.6.21 - Local Privilege Escalation

Title source: llm

Description

The _udp_lib_get_port function in net/ipv4/udp.c in Linux kernel 2.6.21 and earlier does not prevent a bind to a port with a local address when there is already a bind to that port with a wildcard local address, which might allow local users to intercept local traffic for daemons or other applications.

Scores

EPSS 0.0006
EPSS Percentile 18.1%

Classification

Status draft

Affected Products (1)

linux/linux_kernel < 2.6.21

Timeline

Published May 03, 2007
Tracked Since Feb 18, 2026