CVE-2007-1388

no score yetEPSS 0.6%

linux linux kernel: no CVSS score yet. EPSS 0.6% chance of exploitation in the next 30 days.

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2007-03-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel

References

http://bugzilla.kernel.org/show_bug.cgi?id=8155
http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html
http://secunia.com/advisories/24777
http://secunia.com/advisories/24901
http://secunia.com/advisories/25080

Check your stack JSON