CVE-2008-4395: Linux Kernel

High severity, CVSS 8.3. EPSS: 2.4% chance of exploitation in the next 30 days.

Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.

Affected products

  • Linux Linux Kernel: version 2.6 only
  • Ubuntu Linux Kernel: up to and including 2.6.26

Published 2008-11-06. Last modified 2026-06-16.