CVE-2007-1861

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-07 · updated 2026-06-16
Weakness: CWE-399

Description

The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.

Affected products

Linux kernel: through 2.6.20.8; 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5 (+144)

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.8
http://secunia.com/advisories/25030
http://secunia.com/advisories/25083
http://secunia.com/advisories/25228
http://secunia.com/advisories/25288
http://secunia.com/advisories/25691
http://secunia.com/advisories/25961
http://secunia.com/advisories/26133
http://secunia.com/advisories/26139
http://secunia.com/advisories/26620
http://www.debian.org/security/2007/dsa-1289
http://www.mandriva.com/security/advisories?name=MDKSA-2007:171

Get alerted when CVE-2007-1861 or the next vulnerability affects your stack