CVE-1999-0426
Critical · 9.8CVSS
9.8
EPSS
10.8%
Published
Mar 1, 1999
CISA due date
—
The record
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-57924 In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive… CWE-276
- CVE-2026-48935 A flaw in Node.js Permission API can cause a file metadata to be modified even on a path… CWE-276
- CVE-2026-48725 Warp is an agentic development environment. CWE-276
- CVE-2026-56301 Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server… CWE-276
- CVE-2026-12602 Incorrect default permissions in ArubaSign, affecting versions prior to v4.6.6. CWE-276
- CVE-2026-12823 A security flaw has been discovered in Browserbase up to 20260526. CWE-276
- GHSA-rwp6-7w3q-75fq OpenClaw: Config recovery could restore openclaw.json with broad file permissions CWE-276
- GHSA-534h-c3cw-v3h9 Nuxt dev server vite-node IPC socket is world-connectable on Linux CWE-276