CVE-2009-4138

N/A Unknown
Published: December 16, 2009 Modified: April 23, 2026
View on NVD

Description

drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://patchwork.kernel.org/patch/66747/
Source: secalert@redhat.com
Patch
http://secunia.com/advisories/38017
Source: secalert@redhat.com
http://secunia.com/advisories/38276
Source: secalert@redhat.com
http://www.securityfocus.com/bid/37339
Source: secalert@redhat.com
http://patchwork.kernel.org/patch/66747/
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://secunia.com/advisories/38017
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/38276
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.avaya.com/css/P8/documents/100073666
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2010/dsa-2005
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.openwall.com/lists/oss-security/2009/12/15/1
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.securityfocus.com/bid/37339
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=547236
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
https://rhn.redhat.com/errata/RHSA-2010-0046.html
Source: af854a3a-2127-422b-91ae-364da2661108
https://rhn.redhat.com/errata/RHSA-2010-0095.html
Source: af854a3a-2127-422b-91ae-364da2661108

34 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.1%
24th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

linux