CVE-2004-0424: Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6....

Security readout for executives and security teams

This is an old Linux kernel flaw where a local user could crash the system or potentially run code through a multicast socket option. It matters mainly for legacy Linux systems still running kernels 2.4.22-2.4.25 or 2.6.1-2.6.3, including long-retired vendor distributions. Exposure is likely limited to obsolete Linux hosts, embedded systems, appliances, or unsupported virtual machines running affected 2.4.x or early 2.6.x kernels. Standard modern Linux distributions should not be assumed affected unless version or vendor package evidence matches. Prioritize if any production, shared, or externally administered legacy Linux hosts remain. This is not a broad modern internet-facing issue based on the provided evidence, but local kernel code execution potential makes unpatched legacy systems unacceptable in sensitive environments. Mitigation focus: Identify systems running Linux 2.4.22-2.4.25 or 2.6.1-2.6.3.; Apply the relevant vendor kernel errata or supported replacement kernel.; Retire or isolate unsupported legacy Linux systems where patching is unavailable..

Prepared

Jun 30, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.