CVE-2005-2490: Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows loc...

Security readout for executives and security teams

CVE-2005-2490 is an old Linux kernel flaw where a local user could trigger a stack buffer overflow through sendmsg and potentially run code in kernel context. It matters mainly for legacy systems still running Linux 2.6 kernels before 2.6.13.1 or unpatched vendor backports. Exposure is most likely on obsolete Linux 2.6 systems, embedded appliances, or unsupported distributions that did not receive 2005-era vendor kernel updates. Modern maintained Linux distributions are unlikely to be affected, but vendor backport status must be checked. Prioritize if legacy Linux 2.6 systems still exist in production or regulated environments. The issue is old, local-only, and not KEV-listed, but successful exploitation could undermine host integrity on unpatched systems. Mitigation focus: Upgrade affected Linux kernels to vendor-fixed builds or 2.6.13.1 or later.; Check distribution advisories for backported kernel fixes before judging by version string alone.; Retire unsupported Linux 2.6 systems where practical..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.