CVE-2009-1389: Buffer Overflow
Published Feb 14, 2009
·Updated
Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.
Other sources
Created attachment 346959 [details] backtraces
Description of problem: Michael Tokarev reported receiving a large packet could crash a machine with RTL8169 NIC.
Problem is this driver tells that NIC frames up to 16383 bytes can be received but provides skb to rx ring allocated with smaller sizes (1536 bytes in case standard 1500 bytes MTU is used)
When a frame larger than what was allocated by driver is received, dma transfert can occurs past the end of buffer and corrupt kernel memory.
Fix is to tell to NIC what is the maximum size a frame can be.
References: http://marc.info/?t=123462473200002 http://lkml.org/lkml/2009/6/8/194 http://www.corpit.ru/mjt/r8169-mtu-oops.jpg http://article.gmane.org/gmane.linux.network/130114 http://www.mail-archive.com/debian-kernel@lists.debian.org/msg45651.html
— Red Hat
Affected Software
415 affected componentsFixes available
redhat/kernel-rt<0:2.6.24.7-126.el5
0:2.6.24.7-126.el5
redhat/kernel<0:2.6.18-128.4.1.el5
0:2.6.18-128.4.1.el5
redhat/kernel<0:2.6.18-92.1.28.el5
0:2.6.18-92.1.28.el5
Linux Kernel=2.6.24.7
Linux Kernel=2.6.25.15
Linux Linux kernel=2.2.6
Linux Linux kernel=2.6
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.0-test3
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.1-rc3
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.2-rc1
Linux Linux kernel=2.6.2-rc2
Linux Linux kernel=2.6.2-rc3
Linux Linux kernel=2.6.2.27.13
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.3-rc1
Linux Linux kernel=2.6.3-rc2
Linux Linux kernel=2.6.3-rc3
Linux Linux kernel=2.6.3-rc4
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6.4-rc1
Linux Linux kernel=2.6.4-rc2
Linux Linux kernel=2.6.4-rc3
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.5-rc1
Linux Linux kernel=2.6.5-rc2
Linux Linux kernel=2.6.5-rc3
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.6.6-rc2
Linux Linux kernel=2.6.6-rc3
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.6.7-rc2
Linux Linux kernel=2.6.7-rc3
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.6.8-rc4
Linux Linux kernel=2.6.8.1
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.9
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.6.9-rc1
Linux Linux kernel=2.6.9-rc2
Linux Linux kernel=2.6.9-rc3
Linux Linux kernel=2.6.9-rc4
Linux Linux kernel=2.6.10
Linux Linux kernel=2.6.10-rc1
Linux Linux kernel=2.6.10-rc2
Linux Linux kernel=2.6.10-rc3
Linux Linux kernel=2.6.11
Linux Linux kernel=2.6.11
Linux Linux kernel=2.6.11-rc1
Linux Linux kernel=2.6.11-rc2
Linux Linux kernel=2.6.11-rc3
Linux Linux kernel=2.6.11-rc4
Linux Linux kernel=2.6.11-rc5
Linux Linux kernel=2.6.11.1
Linux Linux kernel=2.6.11.2
Linux Linux kernel=2.6.11.3
Linux Linux kernel=2.6.11.4
Linux Linux kernel=2.6.11.5
Linux Linux kernel=2.6.11.6
Linux Linux kernel=2.6.11.7
Linux Linux kernel=2.6.11.8
Linux Linux kernel=2.6.11.9
Linux Linux kernel=2.6.11.10
Linux Linux kernel=2.6.11.11
Linux Linux kernel=2.6.11.12
Linux Linux kernel=2.6.11_rc1_bk6
Linux Linux kernel=2.6.12
Linux Linux kernel=2.6.12-rc1
Linux Linux kernel=2.6.12-rc2
Linux Linux kernel=2.6.12-rc3
Linux Linux kernel=2.6.12-rc4
Linux Linux kernel=2.6.12-rc5
Linux Linux kernel=2.6.12-rc6
Linux Linux kernel=2.6.12.1
Linux Linux kernel=2.6.12.2
Linux Linux kernel=2.6.12.3
Linux Linux kernel=2.6.12.4
Linux Linux kernel=2.6.12.5
Linux Linux kernel=2.6.12.6
Linux Linux kernel=2.6.12.12
Linux Linux kernel=2.6.12.22
Linux Linux kernel=2.6.13
Linux Linux kernel=2.6.13-rc1
Linux Linux kernel=2.6.13-rc2
Linux Linux kernel=2.6.13-rc3
Linux Linux kernel=2.6.13-rc4
Linux Linux kernel=2.6.13-rc5
Linux Linux kernel=2.6.13-rc6
Linux Linux kernel=2.6.13-rc7
Linux Linux kernel=2.6.13.1
Linux Linux kernel=2.6.13.2
Linux Linux kernel=2.6.13.3
Linux Linux kernel=2.6.13.4
Linux Linux kernel=2.6.13.5
Linux Linux kernel=2.6.14
Linux Linux kernel=2.6.14-rc1
Linux Linux kernel=2.6.14-rc2
Linux Linux kernel=2.6.14-rc3
Linux Linux kernel=2.6.14-rc4
Linux Linux kernel=2.6.14-rc5
Linux Linux kernel=2.6.14.1
Linux Linux kernel=2.6.14.2
Linux Linux kernel=2.6.14.3
Linux Linux kernel=2.6.14.4
Linux Linux kernel=2.6.14.5
Linux Linux kernel=2.6.14.6
Linux Linux kernel=2.6.14.7
Linux Linux kernel=2.6.15
Linux Linux kernel=2.6.15-rc1
Linux Linux kernel=2.6.15-rc2
Linux Linux kernel=2.6.15-rc3
Linux Linux kernel=2.6.15-rc4
Linux Linux kernel=2.6.15-rc5
Linux Linux kernel=2.6.15-rc6
Linux Linux kernel=2.6.15-rc7
Linux Linux kernel=2.6.15.1
Linux Linux kernel=2.6.15.2
Linux Linux kernel=2.6.15.3
Linux Linux kernel=2.6.15.4
Linux Linux kernel=2.6.15.5
Linux Linux kernel=2.6.15.6
Linux Linux kernel=2.6.15.7
Linux Linux kernel=2.6.15.11
Linux Linux kernel=2.6.16
Linux Linux kernel=2.6.16-rc1
Linux Linux kernel=2.6.16-rc2
Linux Linux kernel=2.6.16-rc3
Linux Linux kernel=2.6.16-rc4
Linux Linux kernel=2.6.16-rc5
Linux Linux kernel=2.6.16-rc6
Linux Linux kernel=2.6.16.1
Linux Linux kernel=2.6.16.2
Linux Linux kernel=2.6.16.3
Linux Linux kernel=2.6.16.4
Linux Linux kernel=2.6.16.5
Linux Linux kernel=2.6.16.6
Linux Linux kernel=2.6.16.7
Linux Linux kernel=2.6.16.8
Linux Linux kernel=2.6.16.9
Linux Linux kernel=2.6.16.10
Linux Linux kernel=2.6.16.11
Linux Linux kernel=2.6.16.12
Linux Linux kernel=2.6.16.13
Linux Linux kernel=2.6.16.14
Linux Linux kernel=2.6.16.15
Linux Linux kernel=2.6.16.16
Linux Linux kernel=2.6.16.17
Linux Linux kernel=2.6.16.18
Linux Linux kernel=2.6.16.19
Linux Linux kernel=2.6.16.20
Linux Linux kernel=2.6.16.21
Linux Linux kernel=2.6.16.22
Linux Linux kernel=2.6.16.23
Linux Linux kernel=2.6.16.24
Linux Linux kernel=2.6.16.25
Linux Linux kernel=2.6.16.26
Linux Linux kernel=2.6.16.27
Linux Linux kernel=2.6.16.28
Linux Linux kernel=2.6.16.29
Linux Linux kernel=2.6.16.30
Linux Linux kernel=2.6.16.31
Linux Linux kernel=2.6.16.32
Linux Linux kernel=2.6.16.33
Linux Linux kernel=2.6.16.34
Linux Linux kernel=2.6.16.35
Linux Linux kernel=2.6.16.36
Linux Linux kernel=2.6.16.37
Linux Linux kernel=2.6.16.38
Linux Linux kernel=2.6.16.39
Linux Linux kernel=2.6.16.40
Linux Linux kernel=2.6.16.41
Linux Linux kernel=2.6.16.42
Linux Linux kernel=2.6.16.43
Linux Linux kernel=2.6.16.44
Linux Linux kernel=2.6.16.45
Linux Linux kernel=2.6.16.46
Linux Linux kernel=2.6.16.47
Linux Linux kernel=2.6.16.48
Linux Linux kernel=2.6.16.49
Linux Linux kernel=2.6.16.50
Linux Linux kernel=2.6.16.51
Linux Linux kernel=2.6.16.52
Linux Linux kernel=2.6.16.53
Linux Linux kernel=2.6.16.54
Linux Linux kernel=2.6.16.55
Linux Linux kernel=2.6.16.56
Linux Linux kernel=2.6.16.57
Linux Linux kernel=2.6.16.58
Linux Linux kernel=2.6.16.59
Linux Linux kernel=2.6.16.60
Linux Linux kernel=2.6.16.61
Linux Linux kernel=2.6.16.62
Linux Linux kernel=2.6.16_rc7
Linux Linux kernel=2.6.17
Linux Linux kernel=2.6.17-rc1
Linux Linux kernel=2.6.17-rc2
Linux Linux kernel=2.6.17-rc3
Linux Linux kernel=2.6.17-rc4
Linux Linux kernel=2.6.17-rc5
Linux Linux kernel=2.6.17-rc6
Linux Linux kernel=2.6.17.1
Linux Linux kernel=2.6.17.2
Linux Linux kernel=2.6.17.3
Linux Linux kernel=2.6.17.4
Linux Linux kernel=2.6.17.5
Linux Linux kernel=2.6.17.6
Linux Linux kernel=2.6.17.7
Linux Linux kernel=2.6.17.8
Linux Linux kernel=2.6.17.9
Linux Linux kernel=2.6.17.10
Linux Linux kernel=2.6.17.11
Linux Linux kernel=2.6.17.12
Linux Linux kernel=2.6.17.13
Linux Linux kernel=2.6.17.14
Linux Linux kernel=2.6.18
Linux Linux kernel=2.6.18
Linux Linux kernel=2.6.18-rc1
Linux Linux kernel=2.6.18-rc2
Linux Linux kernel=2.6.18-rc3
Linux Linux kernel=2.6.18-rc4
Linux Linux kernel=2.6.18-rc5
Linux Linux kernel=2.6.18-rc6
Linux Linux kernel=2.6.18-rc7
Linux Linux kernel=2.6.18.0
Linux Linux kernel=2.6.18.1
Linux Linux kernel=2.6.18.2
Linux Linux kernel=2.6.18.3
Linux Linux kernel=2.6.18.4
Linux Linux kernel=2.6.18.5
Linux Linux kernel=2.6.18.6
Linux Linux kernel=2.6.18.7
Linux Linux kernel=2.6.18.8
Linux Linux kernel=2.6.19
Linux Linux kernel=2.6.19-rc1
Linux Linux kernel=2.6.19-rc2
Linux Linux kernel=2.6.19-rc3
Linux Linux kernel=2.6.19-rc4
Linux Linux kernel=2.6.19.1
Linux Linux kernel=2.6.19.2
Linux Linux kernel=2.6.19.3
Linux Linux kernel=2.6.19.4
Linux Linux kernel=2.6.19.5
Linux Linux kernel=2.6.19.6
Linux Linux kernel=2.6.19.7
Linux Linux kernel=2.6.20
Linux Linux kernel=2.6.20-rc2
Linux Linux kernel=2.6.20.1
Linux Linux kernel=2.6.20.2
Linux Linux kernel=2.6.20.3
Linux Linux kernel=2.6.20.4
Linux Linux kernel=2.6.20.5
Linux Linux kernel=2.6.20.6
Linux Linux kernel=2.6.20.7
Linux Linux kernel=2.6.20.8
Linux Linux kernel=2.6.20.9
Linux Linux kernel=2.6.20.10
Linux Linux kernel=2.6.20.11
Linux Linux kernel=2.6.20.12
Linux Linux kernel=2.6.20.13
Linux Linux kernel=2.6.20.14
Linux Linux kernel=2.6.20.15
Linux Linux kernel=2.6.20.16
Linux Linux kernel=2.6.20.17
Linux Linux kernel=2.6.20.18
Linux Linux kernel=2.6.20.19
Linux Linux kernel=2.6.20.20
Linux Linux kernel=2.6.20.21
Linux Linux kernel=2.6.21
Linux Linux kernel=2.6.21-git1
Linux Linux kernel=2.6.21-git2
Linux Linux kernel=2.6.21-git3
Linux Linux kernel=2.6.21-git4
Linux Linux kernel=2.6.21-git5
Linux Linux kernel=2.6.21-git6
Linux Linux kernel=2.6.21-git7
Linux Linux kernel=2.6.21-rc3
Linux Linux kernel=2.6.21-rc4
Linux Linux kernel=2.6.21-rc5
Linux Linux kernel=2.6.21-rc6
Linux Linux kernel=2.6.21-rc7
Linux Linux kernel=2.6.21.1
Linux Linux kernel=2.6.21.2
Linux Linux kernel=2.6.21.3
Linux Linux kernel=2.6.21.4
Linux Linux kernel=2.6.21.5
Linux Linux kernel=2.6.21.6
Linux Linux kernel=2.6.21.7
Linux Linux kernel=2.6.22
Linux Linux kernel=2.6.22-rc6
Linux Linux kernel=2.6.22.1
Linux Linux kernel=2.6.22.2
Linux Linux kernel=2.6.22.3
Linux Linux kernel=2.6.22.4
Linux Linux kernel=2.6.22.5
Linux Linux kernel=2.6.22.6
Linux Linux kernel=2.6.22.6
Linux Linux kernel=2.6.22.7
Linux Linux kernel=2.6.22.10
Linux Linux kernel=2.6.22.11
Linux Linux kernel=2.6.22.12
Linux Linux kernel=2.6.22.13
Linux Linux kernel=2.6.22.14
Linux Linux kernel=2.6.22.15
Linux Linux kernel=2.6.22.16
Linux Linux kernel=2.6.22.17
Linux Linux kernel=2.6.22.18
Linux Linux kernel=2.6.22.19
Linux Linux kernel=2.6.22.20
Linux Linux kernel=2.6.22.21
Linux Linux kernel=2.6.22.22
Linux Linux kernel=2.6.23
Linux Linux kernel=2.6.23-rc1
Linux Linux kernel=2.6.23-rc2
Linux Linux kernel=2.6.23.1
Linux Linux kernel=2.6.23.2
Linux Linux kernel=2.6.23.3
Linux Linux kernel=2.6.23.4
Linux Linux kernel=2.6.23.5
Linux Linux kernel=2.6.23.6
Linux Linux kernel=2.6.23.7
Linux Linux kernel=2.6.23.9
Linux Linux kernel=2.6.23.14
Linux Linux kernel=2.6.24-rc2
Linux Linux kernel=2.6.24-rc3
Linux Linux kernel=2.6.27-rc1
Linux Linux kernel=2.6.27-rc2
Linux Linux kernel=2.6.27-rc3
Linux Linux kernel=2.6.27-rc4
Linux Linux kernel=2.6.27-rc5
Linux Linux kernel=2.6.27-rc6
Linux Linux kernel=2.6.27-rc7
Linux Linux kernel=2.6.27-rc8
Linux Linux kernel=2.6.27-rc9
Linux Linux kernel=2.6.27.2
Linux Linux kernel=2.6.27.3
Linux Linux kernel=2.6.27.4
Linux Linux kernel=2.6.27.5
Linux Linux kernel=2.6.27.6
Linux Linux kernel=2.6.27.7
Linux Linux kernel=2.6.27.8
Linux Linux kernel=2.6.27.9
Linux Linux kernel=2.6.27.20
Linux Linux kernel=2.6.27.21
Linux Linux kernel=2.6.27.22
Linux Linux kernel=2.6.27.23
Linux Linux kernel=2.6.27.24
Linux Linux kernel=2.6.28
Linux Linux kernel=2.6.28-git7
Linux Linux kernel=2.6.28-rc1
Linux Linux kernel=2.6.28-rc2
Linux Linux kernel=2.6.28-rc3
Linux Linux kernel=2.6.28-rc4
Linux Linux kernel=2.6.28-rc5
Linux Linux kernel=2.6.28-rc6
Linux Linux kernel=2.6.28-rc7
Linux Linux kernel=2.6.28.1
Linux Linux kernel=2.6.28.2
Linux Linux kernel=2.6.28.3
Linux Linux kernel=2.6.28.4
Linux Linux kernel=2.6.28.5
Linux Linux kernel=2.6.28.6
Linux Linux kernel=2.6.28.7
Linux Linux kernel=2.6.28.8
Linux Linux kernel=2.6.28.9
Linux Linux kernel=2.6.28.10
Linux Linux kernel=2.6.29
Linux Linux kernel=2.6.29-git1
Linux Linux kernel=2.6.29-rc1
Linux Linux kernel=2.6.29-rc2
Linux Linux kernel=2.6.29-rc2_git7
Linux Linux kernel=2.6.29-rc8-kk
Linux Linux kernel=2.6.29.3
Linux Linux kernel=2.6.29.rc1
Linux Linux kernel=2.6.29.rc2
Linux Linux kernel=2.6.29.rc2-git1
Linux Linux kernel=2.6.30-rc3
Linux Linux kernel=2.6.30-rc4
Linux Linux kernel=2.6_test9_cvs
Event History
Feb 14, 2009
CVE Published
via Red Hat·12:00 AM
Jun 9, 2009
Data Sourced
via Red Hat·02:43 AM
DescriptionSeverityAffected Software
Jun 16, 2009
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
What is the severity of CVE-2009-1389?
CVE-2009-1389 has a severity rating that may lead to denial of service through kernel memory corruption and crash.
2
How do I fix CVE-2009-1389?
To fix CVE-2009-1389, update to a kernel version that is 2.6.30 or later, as this vulnerability is addressed in those releases.
3
Which systems are affected by CVE-2009-1389?
CVE-2009-1389 affects Linux kernel versions prior to 2.6.30, particularly those using the RTL8169 NIC driver.
4
What potential impact does CVE-2009-1389 have on my system?
The impact of CVE-2009-1389 includes possible denial of service through system crashes caused by malformed packets.
5
Are there any known exploits for CVE-2009-1389?
Yes, there are known exploits for CVE-2009-1389 that can allow attackers to cause system instability remotely.