CVE-2009-1389 — kernel: r8169: fix crash when large packets are received

Back Back to CVE browser

HIGH

kernel: r8169: fix crash when large packets are received

Published Jun 16, 2009

7.8

HIGH

CVSS 2.0

EPSS 5.47%

Description

Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.

Affected products

MRG for RHEL-5

kernel-rt-0:2.6.24.7-126.el5rt

Fixed · RHSA-2009:1157
Red Hat Enterprise Linux 4

kernel-0:2.6.9-89.0.7.EL

Fixed · RHSA-2009:1211
Red Hat Enterprise Linux 4.7 Z Stream

kernel-0:2.6.9-78.0.27.EL

Fixed · RHSA-2009:1469
Red Hat Enterprise Linux 5

kernel-0:2.6.18-128.4.1.el5

Fixed · RHSA-2009:1193
Red Hat Enterprise Linux 5.2 Z Stream

kernel-0:2.6.18-92.1.28.el5

Fixed · RHSA-2009:1457
Red Hat Enterprise Linux 5.3.Z - Server Only

kernel-0:2.6.18-128.4.1.el5

Fixed · RHSA-2009:1193

Product	Package	State	Advisory
MRG for RHEL-5	kernel-rt-0:2.6.24.7-126.el5rt	Fixed	RHSA-2009:1157
Red Hat Enterprise Linux 4	kernel-0:2.6.9-89.0.7.EL	Fixed	RHSA-2009:1211
Red Hat Enterprise Linux 4.7 Z Stream	kernel-0:2.6.9-78.0.27.EL	Fixed	RHSA-2009:1469
Red Hat Enterprise Linux 5	kernel-0:2.6.18-128.4.1.el5	Fixed	RHSA-2009:1193
Red Hat Enterprise Linux 5.2 Z Stream	kernel-0:2.6.18-92.1.28.el5	Fixed	RHSA-2009:1457
Red Hat Enterprise Linux 5.3.Z - Server Only	kernel-0:2.6.18-128.4.1.el5	Fixed	RHSA-2009:1193

Remediation

No remediation recorded yet.

Metrics

5.47% 0.05471

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.05471

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	5.47% (0.05471)	92.50th	v5 (v2026.06.15)
Jun 15, 2026	5.37% (0.05368)	91.59th	v5 (v2026.06.15)
Dec 4, 2025	7.83% (0.07833)	91.64th	v4 (v2025.03.14)
Mar 17, 2025	5.52% (0.05521)	89.54th	v4 (v2025.03.14)
Dec 17, 2024	14.17% (0.14171)	95.67th	v3 (v2023.03.01)
Dec 15, 2023	10.36% (0.10363)	94.41th	v3 (v2023.03.01)
Sep 19, 2023	11.36% (0.11364)	94.54th	v3 (v2023.03.01)
Mar 7, 2023	12.68% (0.12683)	94.53th	v3 (v2023.03.01)
Mar 6, 2023	4.36% (0.04358)	88.02th	v2 (v2022.01.01)
Apr 1, 2022	4.36% (0.04358)	86.83th	v2 (v2022.01.01)
Feb 4, 2022	4.36% (0.04358)	70.59th	v2 (v2022.01.01)

Weaknesses (1)

CWE-119

Buffer Overflow

References (43)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html
vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html
vendor-advisoryx_refsource_SUSE
http://lkml.org/lkml/2009/6/8/194
mailing-listx_refsource_MLISTExploit
http://marc.info/?l=linux-netdev&m=123462461713724&w=2
mailing-listx_refsource_MLIST
http://secunia.com/advisories/35265
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/35566
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35847
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36045
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36051
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36131
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36327
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/37298
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/37471
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/40645
third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/css/P8/documents/100067254
x_refsource_CONFIRM
http://support.citrix.com/article/CTX123453
x_refsource_CONFIRM
http://wiki.rpath.com/Advisories:rPSA-2009-0111
x_refsource_CONFIRM
http://www.debian.org/security/2009/dsa-1844
vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1865
vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2009:148
vendor-advisoryx_refsource_MANDRIVA
http://www.openwall.com/lists/oss-security/2009/06/10/1
mailing-listx_refsource_MLIST
http://www.redhat.com/support/errata/RHSA-2009-1157.html
vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-1193.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/505254/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/507985/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/35281
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1023507
vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/usn-807-1
vendor-advisoryx_refsource_UBUNTU
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/3316
vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2010/0219
vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2010/1857
vdb-entryx_refsource_VUPEN
https://access.redhat.com/security/cve/CVE-2009-1389
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=504726
x_refsource_CONFIRMIssue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/51051
vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2009-1389
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415
vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108
vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2009-1389
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html
vendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html
vendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html
vendor-advisoryx_refsource_FEDORA

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4		x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html		vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html		vendor-advisoryx_refsource_SUSE
http://lkml.org/lkml/2009/6/8/194		mailing-listx_refsource_MLISTExploit
http://marc.info/?l=linux-netdev&m=123462461713724&w=2		mailing-listx_refsource_MLIST
http://secunia.com/advisories/35265		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/35566		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35847		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36045		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36051		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36131		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36327		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/37298		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/37471		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/40645		third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/css/P8/documents/100067254		x_refsource_CONFIRM
http://support.citrix.com/article/CTX123453		x_refsource_CONFIRM
http://wiki.rpath.com/Advisories:rPSA-2009-0111		x_refsource_CONFIRM
http://www.debian.org/security/2009/dsa-1844		vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1865		vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2009:148		vendor-advisoryx_refsource_MANDRIVA
http://www.openwall.com/lists/oss-security/2009/06/10/1		mailing-listx_refsource_MLIST
http://www.redhat.com/support/errata/RHSA-2009-1157.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-1193.html		vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/505254/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/507985/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/35281		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1023507		vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/usn-807-1		vendor-advisoryx_refsource_UBUNTU
http://www.vmware.com/security/advisories/VMSA-2009-0016.html		x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/3316		vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2010/0219		vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2010/1857		vdb-entryx_refsource_VUPEN
https://access.redhat.com/security/cve/CVE-2009-1389		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=504726		x_refsource_CONFIRMIssue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/51051		vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2009-1389
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415		vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108		vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2009-1389
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html		vendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html		vendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html		vendor-advisoryx_refsource_FEDORA