CVE-2009-4138 — kernel: firewire: ohci: handle receive packets with a data length of zero

Back Back to CVE browser

MEDIUM

kernel: firewire: ohci: handle receive packets with a data length of zero

Published Dec 16, 2009

4.7

MEDIUM

CVSS 2.0

EPSS 0.36%

Description

drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.

Affected products

MRG for RHEL-5

kernel-rt-0:2.6.24.7-161.el5rt

Fixed · RHSA-2010:0631
Red Hat Enterprise Linux 5

kernel-0:2.6.18-164.11.1.el5

Fixed · RHSA-2010:0046

Product	Package	State	Advisory
MRG for RHEL-5	kernel-rt-0:2.6.24.7-161.el5rt	Fixed	RHSA-2010:0631
Red Hat Enterprise Linux 5	kernel-0:2.6.18-164.11.1.el5	Fixed	RHSA-2010:0046

Remediation

Red Hat statement

Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2009-4138 The Linux kernel packages as shipped with Red Hat Enterprise Linux 3 and 4 have a different (and older) implementation of the driver for OHCI 1394 controllers, which is not affected by this issue. A future kernel update for Red Hat Enterprise MRG will address this flaw.

Metrics

0.36% 0.00361

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00361

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.36% (0.00361)	27.52th	v5 (v2026.06.15)
Jun 15, 2026	0.36% (0.00361)	27.71th	v5 (v2026.06.15)
Mar 17, 2025	0.06% (0.00061)	16.21th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	11.89th	v3 (v2023.03.01)
Jul 2, 2024	0.04% (0.00044)	10.25th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.24th	v3 (v2023.03.01)
Mar 6, 2023	1.55% (0.01547)	74.98th	v2 (v2022.01.01)
Feb 23, 2023	1.55% (0.01547)	74.94th	v2 (v2022.01.01)
Apr 1, 2022	1.55% (0.01547)	72.92th	v2 (v2022.01.01)
Feb 4, 2022	1.55% (0.01547)	51.82th	v2 (v2022.01.01)

Weaknesses (1)

CWE-399

References (20)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html
vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html
vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
vendor-advisoryx_refsource_SUSE
http://patchwork.kernel.org/patch/66747/
x_refsource_CONFIRMPatch
http://secunia.com/advisories/38017
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/38276
third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/css/P8/documents/100073666
x_refsource_CONFIRM
http://www.debian.org/security/2010/dsa-2005
vendor-advisoryx_refsource_DEBIAN
http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2009/12/15/1
mailing-listx_refsource_MLISTPatch
http://www.securityfocus.com/bid/37339
vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2009-4138
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=547236
x_refsource_CONFIRMPatchIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2009-4138
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376
vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527
vdb-entrysignaturex_refsource_OVAL
https://rhn.redhat.com/errata/RHSA-2010-0046.html
vendor-advisoryx_refsource_REDHAT
https://rhn.redhat.com/errata/RHSA-2010-0095.html
vendor-advisoryx_refsource_REDHAT
https://www.cve.org/CVERecord?id=CVE-2009-4138

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54		x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html		vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html		vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html		vendor-advisoryx_refsource_SUSE
http://patchwork.kernel.org/patch/66747/		x_refsource_CONFIRMPatch
http://secunia.com/advisories/38017		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/38276		third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/css/P8/documents/100073666		x_refsource_CONFIRM
http://www.debian.org/security/2010/dsa-2005		vendor-advisoryx_refsource_DEBIAN
http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log		x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2009/12/15/1		mailing-listx_refsource_MLISTPatch
http://www.securityfocus.com/bid/37339		vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2009-4138		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=547236		x_refsource_CONFIRMPatchIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2009-4138
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376		vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527		vdb-entrysignaturex_refsource_OVAL
https://rhn.redhat.com/errata/RHSA-2010-0046.html		vendor-advisoryx_refsource_REDHAT
https://rhn.redhat.com/errata/RHSA-2010-0095.html		vendor-advisoryx_refsource_REDHAT
https://www.cve.org/CVERecord?id=CVE-2009-4138

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published Dec 16, 2009

Updated Aug 7, 2024

Reserved Dec 1, 2009

Link CVE-2009-4138

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-4138

Red Hat

Severity Moderate

Public date Dec 11, 2009

Links CVE-2009-4138 - Bugzilla