CVE-2005-2555: Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capabili...

Security readout for executives and security teams

CVE-2005-2555 is an old Linux kernel 2.6.x authorization flaw. Local users could access socket policy functionality that should have required CAP_NET_ADMIN, potentially enabling unauthorized network-related activity. It is most relevant to legacy systems still running affected 2.6-era kernels. Exposure is likely limited to systems running vulnerable Linux 2.6.x kernels or unpatched vendor kernels from that era. Modern, maintained distributions are unlikely to be affected unless they carry old kernels or unsupported appliances. Treat this as a legacy exposure cleanup item unless vulnerable 2.6.x systems remain in production. If such systems support sensitive workloads or shared access, prioritize patch verification and compensating access controls. Mitigation focus: Inventory systems for Linux 2.6.x or vendor kernels from the affected period.; Apply the relevant vendor kernel update or errata for each distribution.; Reboot systems after kernel updates to ensure the fixed kernel is running..

Prepared

Jun 29, 2026, 18:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.