CVE-2008-3686 describes a denial-of-service vulnerability in the Linux kernel (versions 2.6.26-rc4, 2.6.26.2, and potentially other 2.6.26 versions) affecting the rt6_fill_node function. This flaw allows local users to trigger a kernel OOPS due to a NULL pointer dereference when processing IPv6 requests without an active IPv6 input device. With a CVSS score of 4.9, it is considered a low-severity vulnerability, requiring local access and resulting in a complete loss of availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.6.26CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:* | ||
2.6.26.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.