Description
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-13lenny2 | DSA-1749-1 |
| Debian 4.0 | fai-kernels | 1.17+etch.24etch2 | DSA-1794-1 |
| Debian 4.0 | linux-2.6 | 2.6.18.dfsg.1-24etch2 | DSA-1794-1 |
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.8etch1 | DSA-1787-1 |
| Debian 4.0 | user-mode-linux | 2.6.18-1um-2etch.24etch2 | DSA-1794-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-128.1.6.el5 | RHSA-2009:0326 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | kernel-rt +9 | 2.6.24.7-108.el5rt | RHSA-2009:0360 |
Advisories 5
- RHSA-2009:0326 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-1787-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1749-1 linux-2.6 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1794-1 linux-2.6 - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2009:0360 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- 33938 third-party-advisory
- 34502 third-party-advisory
- RHSA-2009:0326 vendor-advisory
- 37471 third-party-advisory
- RHSA-2009:0360 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- DSA-1749 vendor-advisory
- DSA-1794 vendor-advisory
- oval:org.mitre.oval:def:11529 vdb-entry signature
- 33758 third-party-advisory
- USN-751-1 vendor-advisory
- 35011 third-party-advisory
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list
- [oss-security] 20090220 CVE request: kernel: skfp_ioctl inverted logic flaw mailing-list
- SUSE-SA:2009:031 vendor-advisory
- 34981 third-party-advisory
- 34394 third-party-advisory
- oval:org.mitre.oval:def:8685 vdb-entry signature
- DSA-1787 vendor-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a
- MDVSA-2009:071 vendor-advisory
- [netdev] 20090128 [PATCH] drivers/net/skfp: if !capable(CAP_NET_ADMIN): inverted logic mailing-list
- 34680 third-party-advisory
- ADV-2009-3316 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=486534
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6
- 35394 third-party-advisory