CVE-2007-2525: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized.

Affected products

• Linux Linux Kernel: up to and including 2.6.21

Published 2007-05-08. Last modified 2026-06-16.