CVE-2009-1389

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-06-16 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.

Affected products

Linux Kernel: 2.6.24.7, 2.6.25.15
Linux kernel: 2.2.6, 2.6, 2.6.0, 2.6.0-test1, 2.6.0-test10, 2.6.0-test11 (+384)

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html
http://lkml.org/lkml/2009/6/8/194
http://marc.info/?l=linux-netdev&m=123462461713724&w=2
http://secunia.com/advisories/35265
http://secunia.com/advisories/35566
http://secunia.com/advisories/35847
http://secunia.com/advisories/36045
http://secunia.com/advisories/36051
http://secunia.com/advisories/36131
http://secunia.com/advisories/36327

Get alerted when CVE-2009-1389 or the next vulnerability affects your stack