CVE-2009-2909

kernel: ax25 stack overflow

Published Oct 20, 2009 CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Description
Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel before 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1915-1 New Linux 2.6.26 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1928-1 New Linux 2.6.24 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1929-1 New Linux 2.6.18 packages fix several vulnerabilities
EUVD EUVD EUVD-2009-2897 Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel before 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation.
Ubuntu USN Ubuntu USN USN-864-1 Linux kernel vulnerabilities
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 6:07 AM
Reserved
Aug 20, 2009, 12:00 AM
Status
Modified
Published
Oct 20, 2009, 5:30 PM
Modified
Jun 16, 2026, 11:10 PM
Severity
Important
Public date
Oct 2, 2009, 12:00 AM