CVE-2008-5713: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in UDP_STREAM mode.

Affected products

• Linux Linux Kernel: up to and including 2.6.24.7; version 2.6 only; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.10 only; …

Published 2008-12-24. Last modified 2026-06-16.