CVE-2008-3686

Linux kernel 2.6.26-rc4, 2.6.26.2 - Denial of Service via IPv6 Requests

Title source: llm
STIX 2.1

Description

The rt6_fill_node function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly other 2.6.26 versions, allows local users to cause a denial of service (kernel OOPS) via IPv6 requests when no IPv6 input device is in use, which triggers a NULL pointer dereference.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44605
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31579
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2422
Exploit mailing-list x_refsource_mlist
http://lkml.org/lkml/2008/8/7/230
Exploit mailing-list x_refsource_mlist
http://lkml.org/lkml/2008/8/8/7

Scores

EPSS 0.0047
EPSS Percentile 38.6%

Details

CWE
CWE-399
Status published
Products (2)
linux/linux_kernel 2.6.26 rc4
linux/linux_kernel 2.6.26.2
Published Aug 14, 2008
Tracked Since Feb 18, 2026