CVE-2007-5501: Linux Kernel

High severity, CVSS 7.8. EPSS: 3.8% chance of exploitation in the next 30 days.

The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc through 2.6.24-rc2, allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference.

Affected products

• Linux Linux Kernel: version 2.6.21 only; version 2.6.21.1 only; version 2.6.21.2 only; version 2.6.21.3 only; version 2.6.21.4 only; version 2.6.21.5 only; …

Published 2007-11-15. Last modified 2026-06-16.