Description
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.9etch3 | DSA-2005-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +11 | 2.6.18-164.11.1.el5 | RHSA-2010:0046 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | kernel-rt +10 | 2.6.24.7-161.el5rt | RHSA-2010:0631 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 4.8.13-1.1 | openSUSE-SU-2024:10128-1 |
Advisories 4
- RHSA-2010:0046 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0631 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2005-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10128-1 kernel-debug-4.8.13-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 37339 vdb-entry
- 38276 third-party-advisory
- oval:org.mitre.oval:def:7376 vdb-entry signature
- SUSE-SA:2010:001 vendor-advisory
- http://support.avaya.com/css/P8/documents/100073666
- SUSE-SA:2010:012 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=547236
- oval:org.mitre.oval:def:9527 vdb-entry signature
- http://patchwork.kernel.org/patch/66747/
- [oss-security] 20091215 CVE-2009-4138 kernel: firewire: ohci: handle receive packets with a data length of zero mailing-list
- http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log
- RHSA-2010:0095 vendor-advisory
- SUSE-SA:2010:005 vendor-advisory
- RHSA-2010:0046 vendor-advisory
- DSA-2005 vendor-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54
- 38017 third-party-advisory