CVE catalog
CVE-2008-2136
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 4.93% · Oct 27, 2026
Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count. kernel: sit memory leak
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-12 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-12etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-12etch2 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch2 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch3 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch4 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch5 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch6 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13lenny1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-14 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-15 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-16 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-17 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-17etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch3 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch4 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch5 | fixed |
| Debian | fai-kernels | 4.0 | 1.17 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.13etch3 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.13etch4 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.13etch5 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.13etch6 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.16 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.17 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.17etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch2 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch3 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch4 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch2 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch3 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch4 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch5 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch5 | fixed |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.13etch3 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.13etch4 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.13etch5 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.13etch6 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.16 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.17 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.17etch1 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch1 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch2 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch3 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch4 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch1 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch2 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch3 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch4 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch5 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | linux-2.6 | deb | 4.0 | 2.6.18.dfsg.1-18etch5 | Not reported | DSA-1588-1 | Not reported |
| Debian | fai-kernels | deb | 4.0 | 1.17+etch.18etch5 | Not reported | DSA-1588-1 | Not reported |
| Debian | user-mode-linux | deb | 4.0 | 2.6.18-1um-2etch.18etch5 | Not reported | DSA-1588-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: