CVE-2009-0675
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits...
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.
Exploit likelihood
What each source reports
NVD Score used
2.1
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.
- Record
CVE-2009-0675- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.
- Record
CVE-2009-0675- Updated
- 2026-11-02
EUVDEUVD-2009-0675 No score
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.
- Record
EUVD-2009-0675- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h7j8-fpcf-934w No score
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits...
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.
- Record
GHSA-h7j8-fpcf-934w- Updated
- 2026-11-02
OSVBELL-CVE-2009-0675
2.1
CVE-2009-0675 does not affect BellSoft software
- Record
BELL-CVE-2009-0675- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:5.0 From an advisory covering 11 CVEs |
before 2.6.26-13lenny2, plus listed versions 2.6.26-132.6.26-13lenny2~bpo40+1 |
2.6.26-13lenny2 |
linux-2.6.24Debian:4.0 From an advisory covering 24 CVEs |
before 2.6.24-6~etchnhalf.8etch1, plus listed versions 2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4 Show 4 moreShow less2.6.24-6~etchnhalf.52.6.24-6~etchnhalf.62.6.24-6~etchnhalf.72.6.24-6~etchnhalf.8 |
2.6.24-6~etchnhalf.8etch1 |
linux-2.6Debian:4.0 From an advisory covering 19 CVEs |
before 2.6.18.dfsg.1-24etch2, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1 Show 28 moreShow less2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-172.6.18.dfsg.1-17etch12.6.18.dfsg.1-182.6.18.dfsg.1-18etch12.6.18.dfsg.1-18etch32.6.18.dfsg.1-18etch42.6.18.dfsg.1-18etch52.6.18.dfsg.1-18etch62.6.18.dfsg.1-192.6.18.dfsg.1-202.6.18.dfsg.1-212.6.18.dfsg.1-222.6.18.dfsg.1-22etch12.6.18.dfsg.1-22etch22.6.18.dfsg.1-22etch32.6.18.dfsg.1-232.6.18.dfsg.1-23etch12.6.18.dfsg.1-242.6.18.dfsg.1-24etch1 |
2.6.18.dfsg.1-24etch2 |
fai-kernelsDebian:4.0 From an advisory covering 19 CVEs |
before 1.17+etch.24etch2, plus listed versions 1.171.17+etch.13etch31.17+etch.13etch41.17+etch.13etch51.17+etch.13etch6 Show 22 moreShow less1.17+etch.161.17+etch.171.17+etch.17etch11.17+etch.18etch11.17+etch.18etch21.17+etch.18etch31.17+etch.18etch41.17+etch.18etch51.17+etch.18etch61.17+etch.211.17+etch.22etch11.17+etch.22etch21.17+etch.22etch31.17+etch.231.17+etch.23etch11.17+etch.241.17+etch11.17+etch21.17+etch31.17+etch41.17+etch51.17etch1 |
1.17+etch.24etch2 |
user-mode-linuxDebian:4.0 From an advisory covering 19 CVEs |
before 2.6.18-1um-2etch.24etch2, plus listed versions 2.6.18-1um-22.6.18-1um-2etch.13etch32.6.18-1um-2etch.13etch42.6.18-1um-2etch.13etch52.6.18-1um-2etch.13etch6 Show 20 moreShow less2.6.18-1um-2etch.162.6.18-1um-2etch.172.6.18-1um-2etch.17etch12.6.18-1um-2etch.18etch12.6.18-1um-2etch.18etch22.6.18-1um-2etch.18etch32.6.18-1um-2etch.18etch42.6.18-1um-2etch.18etch52.6.18-1um-2etch.18etch62.6.18-1um-2etch.212.6.18-1um-2etch.22etch12.6.18-1um-2etch.22etch22.6.18-1um-2etch.22etch32.6.18-1um-2etch.232.6.18-1um-2etch.23etch12.6.18-1um-2etch.242.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4 |
2.6.18-1um-2etch.24etch2 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-rtRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-108.el5rt | 0:2.6.24.7-108.el5rt |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0675 is a low vulnerability (CVSS 2.1) in Linux Kernel, published February 22, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. No source names a fixed version.
References
secunia.com/advisories/33938
secunia.com/advisories/34502
redhat.com/support/errata/RHSA-2009-0326.html
secunia.com/advisories/37471
redhat.com/support/errata/RHSA-2009-0360.html
vmware.com/security/advisories/VMSA-2009-0016.html
Show 82 moreShow less
debian.org/security/2009/dsa-1749
debian.org/security/2009/dsa-1794
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11529
secunia.com/advisories/33758
ubuntu.com/usn/usn-751-1
secunia.com/advisories/35011
securityfocus.com/archive/1/507985/100/0/threaded
openwall.com/lists/oss-security/2009/02/20/2
lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
secunia.com/advisories/34981
secunia.com/advisories/34394
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8685
debian.org/security/2009/dsa-1787
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a
mandriva.com/security/advisories?name=MDVSA-2009:071
lists.openwall.net/netdev/2009/01/28/90
secunia.com/advisories/34680
vupen.com/english/advisories/2009/3316
bugzilla.redhat.com/show_bug.cgi?id=486534
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6
secunia.com/advisories/35394
nvd.nist.gov/vuln/detail/CVE-2009-0675
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c25b9abbc2c2c0da88e180c3933d6e773245815a
github.com/advisories/GHSA-h7j8-fpcf-934w
docs.bell-sw.com/security/cves/CVE-2009-0675
access.redhat.com/errata/RHSA-2009:0326
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=459577
bugzilla.redhat.com/show_bug.cgi?id=485908
redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=474495
bugzilla.redhat.com/show_bug.cgi?id=479932
bugzilla.redhat.com/show_bug.cgi?id=481576
bugzilla.redhat.com/show_bug.cgi?id=481604
bugzilla.redhat.com/show_bug.cgi?id=481746
bugzilla.redhat.com/show_bug.cgi?id=482866
bugzilla.redhat.com/show_bug.cgi?id=483201
bugzilla.redhat.com/show_bug.cgi?id=483206
bugzilla.redhat.com/show_bug.cgi?id=485163
bugzilla.redhat.com/show_bug.cgi?id=485909
bugzilla.redhat.com/show_bug.cgi?id=485910
bugzilla.redhat.com/show_bug.cgi?id=486305
bugzilla.redhat.com/show_bug.cgi?id=487394
bugzilla.redhat.com/show_bug.cgi?id=488239
bugzilla.redhat.com/show_bug.cgi?id=489310
bugzilla.redhat.com/show_bug.cgi?id=489457
bugzilla.redhat.com/show_bug.cgi?id=489846
bugzilla.redhat.com/show_bug.cgi?id=490433
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0326.json
access.redhat.com/security/cve/CVE-2008-3528
cve.org/CVERecord?id=CVE-2008-3528
nvd.nist.gov/vuln/detail/CVE-2008-3528
access.redhat.com/security/cve/CVE-2008-5700
cve.org/CVERecord?id=CVE-2008-5700
nvd.nist.gov/vuln/detail/CVE-2008-5700
access.redhat.com/security/cve/CVE-2009-0028
cve.org/CVERecord?id=CVE-2009-0028
nvd.nist.gov/vuln/detail/CVE-2009-0028
access.redhat.com/security/cve/CVE-2009-0269
cve.org/CVERecord?id=CVE-2009-0269
nvd.nist.gov/vuln/detail/CVE-2009-0269
access.redhat.com/security/cve/CVE-2009-0322
cve.org/CVERecord?id=CVE-2009-0322
nvd.nist.gov/vuln/detail/CVE-2009-0322
access.redhat.com/security/cve/CVE-2009-0675
cve.org/CVERecord?id=CVE-2009-0675
access.redhat.com/security/cve/CVE-2009-0676
cve.org/CVERecord?id=CVE-2009-0676
nvd.nist.gov/vuln/detail/CVE-2009-0676
access.redhat.com/security/cve/CVE-2009-0778
cve.org/CVERecord?id=CVE-2009-0778
nvd.nist.gov/vuln/detail/CVE-2009-0778
access.redhat.com/errata/RHSA-2009:0360
redhat.com/docs/en-US/Red_Hat_Enterprise_MRG
bugzilla.redhat.com/show_bug.cgi?id=485428
bugzilla.redhat.com/show_bug.cgi?id=480592
bugzilla.redhat.com/show_bug.cgi?id=486645
bugzilla.redhat.com/show_bug.cgi?id=487382
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0360.json
access.redhat.com/security/cve/CVE-2009-0031
cve.org/CVERecord?id=CVE-2009-0031
nvd.nist.gov/vuln/detail/CVE-2009-0031