Description
The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +10 | 2.6.9-55.EL | RHBA-2007:0304 |
Advisories 1
- RHBA-2007:0304 Red Hat Bug Fix Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 5 Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- MDKSA-2005:235 vendor-advisory
- MDKSA-2005:220 vendor-advisory
- http://blog.blackdown.de/2005/05/09/fixing-the-ipt_recent-netfilter-module/
- oval:org.mitre.oval:def:9838 vdb-entry signature
- 14791 vdb-entry
- RHBA-2007-0304 vendor-advisory
- 17826 third-party-advisory
- MDKSA-2005:219 vendor-advisory