EIP-2026-102645

PRE-CVE

Linux Kernel 2.0 Sendmail - Denial of Service

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102645. PoCs published by Michal Zalewski.

AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in Sendmail (2.0.x kernels) by sending spoofed TCP SYN packets followed by RST packets, causing the Sendmail daemon to loop indefinitely. The code constructs raw IP packets with a SYN flag and sends them to the target, exploiting the quirk in the TCP implementation where accept() returns after a SYN is received.

Description

Linux Kernel 2.0 Sendmail - Denial of Service

Exploits (1)

exploitdb WORKING POC VERIFIED
by Michal Zalewski · cdoslinux
https://www.exploit-db.com/exploits/19282

This exploit targets a denial-of-service vulnerability in Sendmail (2.0.x kernels) by sending spoofed TCP SYN packets followed by RST packets, causing the Sendmail daemon to loop indefinitely. The code constructs raw IP packets with a SYN flag and sends them to the target, exploiting the quirk in the TCP implementation where accept() returns after a SYN is received.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Sendmail (2.0.x kernels)
No auth needed
Prerequisites: Raw socket permissions · Target IP address · Ability to spoof source IP
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026