CVE-2008-2358: Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Pro...

Security readout for executives and security teams

CVE-2008-2358 is an old Linux kernel flaw in the DCCP networking subsystem. A local user on an affected system could trigger memory corruption and potentially become privileged. This matters mainly for legacy Linux hosts running kernel 2.6.17 through 2.6.20 or related vendor kernels. Exposure is most likely on legacy servers, appliances, embedded systems, or unsupported distributions still using affected Linux 2.6 kernels. Modern maintained distributions are unlikely to be exposed, but inherited appliances should be checked. Treat this as a legacy-system risk. It is not presented as remotely exploitable or actively exploited, but affected hosts can turn a low-privilege local account into full system compromise. Mitigation focus: Identify systems running Linux kernel 2.6.17 through 2.6.20 or vendor-equivalent kernels.; Apply the relevant vendor kernel updates from Red Hat, Ubuntu, Debian, SUSE, Mandriva, or other maintainers.; Retire or isolate unsupported systems that cannot receive fixed kernel packages..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.