CVE-2009-4138

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-12-16 · updated 2026-06-16
Weakness: CWE-399

Description

drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.

Affected products

Linux kernel: through 2.6.32; 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5 (+331)

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
http://patchwork.kernel.org/patch/66747/
http://secunia.com/advisories/38017
http://secunia.com/advisories/38276
http://support.avaya.com/css/P8/documents/100073666
http://www.debian.org/security/2010/dsa-2005
http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log
http://www.openwall.com/lists/oss-security/2009/12/15/1
http://www.securityfocus.com/bid/37339

Get alerted when CVE-2009-4138 or the next vulnerability affects your stack