CVE-2009-3613

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-10-19 · updated 2026-06-16
Weakness: CWE-399

Description

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping.

Affected products

Linux kernel: through 2.6.27.21; 2.2.27, 2.4.36, 2.4.36.1, 2.4.36.2, 2.4.36.3, 2.4.36.4 (+299)

References

http://bugzilla.kernel.org/show_bug.cgi?id=9468
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97d477a914b146e7e6722ded21afa79886ae8ccd
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a866bbf6aacf95f849810079442a20be118ce905
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
http://marc.info/?l=oss-security&m=125561712529352&w=2
http://secunia.com/advisories/37909
http://secunia.com/advisories/38794
http://secunia.com/advisories/38834
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.22
http://www.redhat.com/support/errata/RHSA-2009-1671.html
http://www.securityfocus.com/bid/36706

Get alerted when CVE-2009-3613 or the next vulnerability affects your stack