CVE-2005-4886: The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allow...

Security readout for executives and security teams

CVE-2005-4886 is an old Linux kernel denial-of-service flaw. A remote attacker could trigger a kernel OOPS through IPv6 handling in SELinux code, potentially crashing or disrupting affected systems. The bundle does not show active exploitation or named impacted distributions. Exposure appears limited to systems running Linux kernel versions before 2.6.12-rc4 with the affected SELinux IPv6 packet parsing path reachable. The bundle does not provide CPEs, supported distribution names, or configuration prerequisites beyond the kernel component. This is not a modern widespread emergency based on the provided evidence. Prioritize it in legacy system risk reviews, especially where old Linux kernels are internet-facing or operationally critical. Mitigation focus: Identify any Linux kernels older than 2.6.12-rc4.; Upgrade to a vendor-supported kernel containing the upstream fix.; Check distribution advisories for backported fixes before judging by version string alone..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.