CVE-2010-4805: The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a b...

Security readout for executives and security teams

CVE-2010-4805 is a Linux kernel network denial-of-service flaw. Very old kernels could mishandle queued received packets, allowing a remote attacker to disrupt availability by sending heavy network traffic. The record says this came from an incomplete earlier fix for CVE-2010-4251. Exposure is most likely on legacy Linux systems, embedded devices, appliances, or vendor kernels that predate 2.6.35 and did not receive a backported fix. Modern supported distributions are less likely affected, but vendor kernel versioning must be checked because fixes may be backported. Prioritize this where legacy Linux systems remain exposed to untrusted networks. The main business risk is outage, not data theft. If no pre-2.6.35 or unsupported vendor kernels exist, this is a low-priority legacy hygiene item. Mitigation focus: Inventory Linux systems running kernels older than 2.6.35 or unsupported vendor kernels.; Apply vendor-supported kernel updates containing the CVE-2010-4805 socket backlog fix.; Confirm with appliance vendors whether fixed firmware includes the upstream or backported correction..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.