VULNERABILITY INTELLIGENCE
CVE-2009-4138
CVSS score4.7 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2009-12-16
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:C
Description
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.