CVE-2009-4138
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is...
4.7 Medium
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
Exploit likelihood
0.36%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
- Record
CVE-2009-4138- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
- Record
CVE-2009-4138- Updated
- 2026-11-02
EUVDEUVD-2009-4108 No score
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
- Record
EUVD-2009-4108- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xfrx-mv2w-4mhc No score
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is...
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
- Record
GHSA-xfrx-mv2w-4mhc- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10128-1 No score
kernel-debug-4.8.13-1.1 on GA media
These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10128-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6.24Debian:4.0 From an advisory covering 18 CVEs |
before 2.6.24-6~etchnhalf.9etch3, plus listed versions 2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4 Show 10 moreShow less2.6.24-6~etchnhalf.52.6.24-6~etchnhalf.62.6.24-6~etchnhalf.72.6.24-6~etchnhalf.82.6.24-6~etchnhalf.8etch12.6.24-6~etchnhalf.8etch22.6.24-6~etchnhalf.8etch32.6.24-6~etchnhalf.92.6.24-6~etchnhalf.9etch12.6.24-6~etchnhalf.9etch2 |
2.6.24-6~etchnhalf.9etch3 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
Show 38 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:2.6.18-164.11.1.el5 | 0:2.6.18-164.11.1.el5 |
kernel-rtRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 14 CVEs |
before 0:2.6.24.7-161.el5rt | 0:2.6.24.7-161.el5rt |
kernel-sourceopenSUSE:Tumbleweed From an advisory covering 82 CVEs |
before 4.8.13-1.1 | 4.8.13-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-4138 is a medium vulnerability (CVSS 4.7) in Linux Kernel, published December 16, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. No source names a fixed version.
References
securityfocus.com/bid/37339
secunia.com/advisories/38276
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376
lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html
support.avaya.com/css/P8/documents/100073666
Show 194 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=547236
patchwork.kernel.org/patch/66747
openwall.com/lists/oss-security/2009/12/15/1
kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log
rhn.redhat.com/errata/RHSA-2010-0095.html
debian.org/security/2010/dsa-2005
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54
nvd.nist.gov/vuln/detail/CVE-2009-4138
github.com/advisories/GHSA-xfrx-mv2w-4mhc
access.redhat.com/errata/RHSA-2010:0046
kbase.redhat.com/faq/docs/DOC-20536
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0046.json
cve.org/CVERecord?id=CVE-2006-6304
redhat.com/docs/en-US/errata/RHSA-2010-0631/Kernel_Security_Update/index.html
suse.com/security/cve/CVE-2009-3939
This page doesn't list everything
Left out here: 20 references. The JSON record has them.