CVE-2010-1188: Linux Kernel

High severity, CVSS 7.1. EPSS: 3.3% chance of exploitation in the next 30 days.

Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed.

Affected products

• Linux Linux Kernel: version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.10 only; version 2.6.11 only; version 2.6.11.1 only; …

Published 2010-03-31. Last modified 2026-06-16.