Denial of Service Vulnerability in Linux

linux Updated 02 Oct 2025

Summary

20/10/2008
N/A
No i
Unrated
Not published

CVE-2008-4609: The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Penetration testing for web, API and mobile Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

Linux is an open-source operating system that is widely used in various devices and systems. It provides a stable and secure platform for running applications and services. However, a vulnerability has been discovered in the TCP implementation of Linux, which can lead to a denial of service (DoS) attack. This vulnerability affects the Linux package in Debian versions 10, 11, 12, and 13.

Vulnerability Detail

The TCP implementation in Linux, as well as other operating systems like BSD Unix, Microsoft Windows, and Cisco products, is susceptible to a DoS attack. Remote attackers can exploit this vulnerability by manipulating information in the TCP state table, causing a connection queue exhaustion. This can result in a significant impact on the availability and performance of the affected system.

How To Fix

No fixed version is published for this vulnerability.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Workaround

There is no known workaround for this vulnerability. It is essential to apply the patch provided by the Linux package maintainers to mitigate the risk of a DoS attack.

Conclusion

In conclusion, a denial of service vulnerability has been identified in the Linux package. It is crucial for users to update their systems and apply the provided patch to mitigate the risk of a DoS attack. For further support on vulnerability remediation, you can contact DevNack.com.

See every vulnerability recorded for linux →

Share this vulnerability

FAQ

This vulnerability can lead to a denial of service (DoS) attack, causing a significant impact on the availability and performance of the affected system.

This vulnerability affects Linux, BSD Unix, Microsoft Windows, Cisco products, and possibly other operating systems.

To protect your system, it is recommended to update the Linux package to the latest version available. Apply the provided patch to mitigate the risk of a DoS attack.

No, there is no known workaround for this vulnerability. Updating the Linux package is the recommended solution.

For more information about this vulnerability, you can visit the Vulert Playground at Vulert Scanner. They provide real-time monitoring and alerts for open-source vulnerabilities.

Related vulnerabilities

Recent vulnerabilities recorded for linux.

How To Fix

No fixed version is published for this vulnerability.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback