CVE-2004-1069: Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash...

Security readout for executives and security teams

This is an old Linux/SELinux kernel denial-of-service issue. A local user could trigger a race condition involving Unix domain sockets and crash the kernel. The business risk is mainly availability on legacy systems that still run affected 2.6-era kernels. Exposure is likely limited to obsolete Linux systems using affected 2.6.x through 2.6.9 SELinux kernels or vendor backports without the fix. Modern supported distributions are unlikely to be affected, but long-lived appliances and unmanaged legacy servers should be checked. Treat this as a legacy-system availability risk, not a broad internet-facing emergency. Prioritize remediation where old Linux systems support shared user access, business-critical services, or hard-to-reboot workloads. Mitigation focus: Identify hosts running Linux 2.6.x through 2.6.9 with SELinux enabled.; Apply vendor kernel updates that include the referenced socket handling fix.; Check Mandriva, Ubuntu, or relevant vendor advisories for backported packages..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.