Description
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +6 | 2.6.9-5.0.3.EL | RHSA-2005:092 |
| RHEL 3 | kernel +8 | 2.4.21-27.0.1.EL | RHSA-2004:689 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Linux Kernel 2.4.22-28/2.6.9 - 'igmp.c' Local Denial of Service EDB-686 · dos · Dec 14, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- RHSA-2005:092 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2004:689 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- oval:org.mitre.oval:def:11144 vdb-entry signature
- MDKSA-2005:022 vendor-advisory
- 20041214 [USN-38-1] Linux kernel vulnerabilities mailing-list
- FLSA:2336 vendor-advisory
- SUSE-SA:2004:044 vendor-advisory
- RHSA-2005:092 vendor-advisory
- CLA-2005:930 vendor-advisory
- http://isec.pl/vulnerabilities/isec-0018-igmp.txt
- linux-igmpmarksources-dos(18482) vdb-entry
- linux-ipmcsource-code-execution(18481) vdb-entry