CVE-2010-0437: Linux Kernel

High severity, CVSS 7.8. EPSS: 12.3% chance of exploitation in the next 30 days.

The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.

Affected products

• Linux Linux Kernel: up to and including 2.6.26.8; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.3 only; version 2.6.4 only; …

Published 2010-03-24. Last modified 2026-06-16.