CVE-2009-0675 — kernel: skfp_ioctl inverted logic flaw

Back Back to CVE browser

LOW

kernel: skfp_ioctl inverted logic flaw

Published Feb 22, 2009

2.1

LOW

CVSS 2.0

EPSS 0.40%

Description

The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.

Affected products

MRG for RHEL-5

kernel-rt-0:2.6.24.7-108.el5rt

Fixed · RHSA-2009:0360
Red Hat Enterprise Linux 5

kernel-0:2.6.18-128.1.6.el5

Fixed · RHSA-2009:0326

Product	Package	State	Advisory
MRG for RHEL-5	kernel-rt-0:2.6.24.7-108.el5rt	Fixed	RHSA-2009:0360
Red Hat Enterprise Linux 5	kernel-0:2.6.18-128.1.6.el5	Fixed	RHSA-2009:0326

Remediation

Red Hat statement

This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 4 as the affected driver is not enabled in these kernels by default. The affected driver is enabled by default in Red Hat Enterprise Linux 2.1, 3, 5, and Red Hat Enterprise MRG. As Red Hat Enterprise Linux 2.1 and 3 are now in Production 3 of their maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata, and this issue has been rated as having moderate impact, the fix for this issue is not currently planned to be included in the future updates.

Metrics

0.40% 0.00401

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00401

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.40% (0.00401)	31.96th	v5 (v2026.06.15)
Jun 15, 2026	0.40% (0.00401)	31.67th	v5 (v2026.06.15)
Mar 17, 2025	0.08% (0.00076)	20.29th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	11.89th	v3 (v2023.03.01)
Jul 2, 2024	0.04% (0.00044)	10.25th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.24th	v3 (v2023.03.01)
Mar 6, 2023	1.55% (0.01547)	74.98th	v2 (v2022.01.01)
Feb 23, 2023	1.55% (0.01547)	74.94th	v2 (v2022.01.01)
Apr 1, 2022	1.55% (0.01547)	72.92th	v2 (v2022.01.01)
Feb 4, 2022	1.55% (0.01547)	51.82th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (30)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
vendor-advisoryx_refsource_SUSE
http://lists.openwall.net/netdev/2009/01/28/90
mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2009/02/20/2
mailing-listx_refsource_MLIST
http://secunia.com/advisories/33758
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/33938
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/34394
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34502
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34680
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34981
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35011
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35394
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/37471
third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2009/dsa-1749
vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1787
vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1794
vendor-advisoryx_refsource_DEBIAN
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6
x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2009:071
vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2009-0326.html
vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0360.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/507985/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.ubuntu.com/usn/usn-751-1
vendor-advisoryx_refsource_UBUNTU
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/3316
vdb-entryx_refsource_VUPEN
https://access.redhat.com/security/cve/CVE-2009-0675
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=486534
x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2009-0675
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11529
vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8685
vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2009-0675

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a		x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html		vendor-advisoryx_refsource_SUSE
http://lists.openwall.net/netdev/2009/01/28/90		mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2009/02/20/2		mailing-listx_refsource_MLIST
http://secunia.com/advisories/33758		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/33938		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/34394		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34502		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34680		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34981		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35011		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35394		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/37471		third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2009/dsa-1749		vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1787		vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1794		vendor-advisoryx_refsource_DEBIAN
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6		x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2009:071		vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2009-0326.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0360.html		vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/507985/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.ubuntu.com/usn/usn-751-1		vendor-advisoryx_refsource_UBUNTU
http://www.vmware.com/security/advisories/VMSA-2009-0016.html		x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/3316		vdb-entryx_refsource_VUPEN
https://access.redhat.com/security/cve/CVE-2009-0675		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=486534		x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2009-0675
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11529		vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8685		vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2009-0675

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 22, 2009

Updated Aug 7, 2024

Reserved Feb 22, 2009

Link CVE-2009-0675

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0675

Red Hat

Severity Moderate

Public date Jan 28, 2009

Links CVE-2009-0675 - Bugzilla