CVE-2009-4138

Linux Kernel < 2.6.32 - Denial of Service via Firewire OHCI ISO Packet Handling

Title source: llm

Description

drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.

References (17)

Core 17

Core References

Patch x_refsource_confirm

http://patchwork.kernel.org/patch/66747/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/37339

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/38276

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html

Vendor Advisory x_refsource_confirm

http://support.avaya.com/css/P8/documents/100073666

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html

Patch x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=547236

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527

Patch mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2009/12/15/1

Vendor Advisory x_refsource_confirm

http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log

Vendor Advisory vendor-advisory x_refsource_redhat

https://rhn.redhat.com/errata/RHSA-2010-0095.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html

Vendor Advisory vendor-advisory x_refsource_redhat

https://rhn.redhat.com/errata/RHSA-2010-0046.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2010/dsa-2005

Patch x_refsource_confirm

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/38017

Scores

EPSS 0.0036

EPSS Percentile 28.9%

Details

CWE

CWE-399

Status published

Products (50)

linux/linux_kernel 2.6.0

linux/linux_kernel 2.6.1

linux/linux_kernel 2.6.2

linux/linux_kernel 2.6.3

linux/linux_kernel 2.6.4

linux/linux_kernel 2.6.5

linux/linux_kernel 2.6.6

linux/linux_kernel 2.6.7

linux/linux_kernel 2.6.8

linux/linux_kernel 2.6.8.1

... and 40 more

Published Dec 16, 2009

Tracked Since Feb 18, 2026