CVE-2005-2873: The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform ce...

Security readout for executives and security teams

This is an old Linux firewall reliability issue. On Linux kernel 2.6.12 and earlier, the ipt_recent module could make recent-match firewall rules block traffic too early after a specific kernel time counter condition. The main business concern is unexpected denial of legitimate traffic on legacy systems. Exposure is most plausible on obsolete Linux systems running kernel 2.6.12 or earlier with ipt_recent-based netfilter rules. The source bundle does not provide complete distribution package ranges, CVSS, CWE, or broad product CPE data. Low immediate urgency unless legacy Linux firewalls remain in production. The issue is old, lacks supplied severity scoring, and has no supplied active exploitation evidence. Unsupported systems should still be retired or patched because firewall reliability failures can disrupt business traffic. Mitigation focus: Identify any Linux hosts still running kernel 2.6.12 or earlier.; Apply applicable vendor kernel updates from the relevant distribution advisory.; If no patch path is documented, check current vendor guidance for the legacy platform..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.