CVE-2013-2128: The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb...

Security readout for executives and security teams

CVE-2013-2128 is a local denial-of-service flaw in older Linux kernels. A user with local access could trigger a kernel crash through TCP socket handling. This is mainly a risk for legacy systems, shared servers, or environments where untrusted users can run code. Exposure is most likely on unsupported or long-lived Linux systems running kernels before 2.6.34, or vendor kernels without the relevant backport. Network-only exposure is not supported by the sources; local user access is required. Treat as a legacy hygiene issue unless vulnerable kernels still exist in production. It can cause outages, but available evidence indicates local access is required and no active exploitation is cited. Mitigation focus: Identify hosts running Linux kernels before 2.6.34 or missing vendor backports.; Apply vendor kernel updates that include the cited upstream fix.; Review Red Hat RHSA-2013:1051 where Red Hat systems are in scope..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.