CVE-2005-3753: Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oo...

Security readout for executives and security teams

This is an old Linux kernel denial-of-service issue in IPsec packet handling. Certain packets may trigger a kernel Oops because crypto code handles misaligned data badly. The CVE record says it is unclear whether an attacker can trigger it, so urgency depends mainly on legacy Linux 2.6 systems still using IPsec. Exposure is most plausible on obsolete Linux 2.6-era systems with IPsec enabled or reachable. Modern supported Linux distributions are unlikely to run these exact kernels, but embedded, appliance, or unmanaged legacy systems should be checked. Low to moderate for most organizations because the issue is very old and exploitation is unconfirmed. Raise priority if critical legacy systems still run affected Linux kernels with IPsec exposed. Mitigation focus: Inventory systems running Linux 2.6-era kernels.; Identify hosts or appliances using IPsec with affected kernel ranges.; Check kernel.org or distribution vendor guidance for fixed kernel versions..

Prepared

Jun 29, 2026, 16:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.