CVE Feed

    Dashboard / CVE / CVE-2009-1389

    CVE-2009-1389

    Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.

    Published:Feb 14, 2009
    Last Modified:Apr 23, 2026
    EPS:Jun 16, 2009
    EPSS Score:0.07833
    CVSS Score:7.8

    Affected Products

    Vendor
    Linux
    Product
    Kernel
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Mrg
    Vendor
    Redhat
    Product
    Rhel Eus

    Exploits

    http://lkml.org/lkml/2009/6/8/194http://lkml.org/lkml/2009/6/8/194

    Related CVEs

    CVE-2026-80719 (CVSS 5.5) — In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after …
    CVE-2026-74639 — In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs o…
    CVE-2026-68455 (CVSS 5.5) — In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before …
    CVE-2026-72049 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump …
    CVE-2026-68090 (CVSS 5.5) — In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurr…
    CVE-2026-64082 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from unini…
    CVE-2026-46243 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego…
    CVE-2026-46300 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker …
    CVE-2026-43266 (CVSS 5.5) — In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't go past the ARM processor…
    CVE-2026-31656 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: fix refcount underflow in in…

    References

    http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4
    http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html
    http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html
    http://lkml.org/lkml/2009/6/8/194
    http://marc.info/?l=linux-netdev&m=123462461713724&w=2
    http://secunia.com/advisories/35265
    http://secunia.com/advisories/35566
    http://secunia.com/advisories/35847
    http://secunia.com/advisories/36045
    http://secunia.com/advisories/36051
    http://secunia.com/advisories/36131
    http://secunia.com/advisories/36327
    http://secunia.com/advisories/37298
    http://secunia.com/advisories/37471
    http://secunia.com/advisories/40645
    http://support.avaya.com/css/P8/documents/100067254
    http://support.citrix.com/article/CTX123453
    http://wiki.rpath.com/Advisories:rPSA-2009-0111
    http://www.debian.org/security/2009/dsa-1844
    http://www.debian.org/security/2009/dsa-1865
    http://www.mandriva.com/security/advisories?name=MDVSA-2009:148
    http://www.openwall.com/lists/oss-security/2009/06/10/1
    http://www.redhat.com/support/errata/RHSA-2009-1157.html
    http://www.redhat.com/support/errata/RHSA-2009-1193.html
    http://www.securityfocus.com/archive/1/505254/100/0/threaded
    http://www.securityfocus.com/archive/1/507985/100/0/threaded
    http://www.securityfocus.com/bid/35281
    http://www.securitytracker.com/id?1023507
    http://www.ubuntu.com/usn/usn-807-1
    http://www.vmware.com/security/advisories/VMSA-2009-0016.html
    http://www.vupen.com/english/advisories/2009/3316
    http://www.vupen.com/english/advisories/2010/0219
    http://www.vupen.com/english/advisories/2010/1857
    https://bugzilla.redhat.com/show_bug.cgi?id=504726
    https://exchange.xforce.ibmcloud.com/vulnerabilities/51051
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108
    https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html
    https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html
    https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html
    http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4
    http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html
    http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html
    http://lkml.org/lkml/2009/6/8/194
    http://marc.info/?l=linux-netdev&m=123462461713724&w=2
    http://secunia.com/advisories/35265
    http://secunia.com/advisories/35566
    http://secunia.com/advisories/35847
    http://secunia.com/advisories/36045
    http://secunia.com/advisories/36051
    http://secunia.com/advisories/36131
    http://secunia.com/advisories/36327
    http://secunia.com/advisories/37298
    http://secunia.com/advisories/37471
    http://secunia.com/advisories/40645
    http://support.avaya.com/css/P8/documents/100067254
    http://support.citrix.com/article/CTX123453
    http://wiki.rpath.com/Advisories:rPSA-2009-0111
    http://www.debian.org/security/2009/dsa-1844
    http://www.debian.org/security/2009/dsa-1865
    http://www.mandriva.com/security/advisories?name=MDVSA-2009:148
    http://www.openwall.com/lists/oss-security/2009/06/10/1
    http://www.redhat.com/support/errata/RHSA-2009-1157.html
    http://www.redhat.com/support/errata/RHSA-2009-1193.html
    http://www.securityfocus.com/archive/1/505254/100/0/threaded
    http://www.securityfocus.com/archive/1/507985/100/0/threaded
    http://www.securityfocus.com/bid/35281
    http://www.securitytracker.com/id?1023507
    http://www.ubuntu.com/usn/usn-807-1
    http://www.vmware.com/security/advisories/VMSA-2009-0016.html
    http://www.vupen.com/english/advisories/2009/3316
    http://www.vupen.com/english/advisories/2010/0219
    http://www.vupen.com/english/advisories/2010/1857
    https://bugzilla.redhat.com/show_bug.cgi?id=504726
    https://exchange.xforce.ibmcloud.com/vulnerabilities/51051
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108
    https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html
    https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html
    https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High