Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol…
Priority MEDIUM 60CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.
Summary
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
Why it matters now
EPSS 0.1673 97th percentileScored 2026-11-07
Fix Fixed Red Hat: 4 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 109
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | up to 2.6.27 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:* | 2.2.27 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:* | 2.4.36 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:* | 2.4.36.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:* | 2.4.36.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:* | 2.4.36.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:* | 2.4.36.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:* | 2.4.36.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:* | 2.4.36.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:* | 2.6 | Vulnerable | Linux |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions up to 2.6.27 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:* Versions 2.2.27 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:* Versions 2.4.36 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:* Versions 2.4.36.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:* Versions 2.4.36.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:* Versions 2.4.36.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:* Versions 2.4.36.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:* Versions 2.4.36.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:* Versions 2.4.36.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Linux
Show 99 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:* | 2.6.18 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:* | 2.6.18 rc1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:* | 2.6.18 rc2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:* | 2.6.18 rc3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:* | 2.6.18 rc4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:* | 2.6.18 rc5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:* | 2.6.18 rc6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:* | 2.6.18 rc7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:* | 2.6.19.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:* | 2.6.19.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:* | 2.6.19.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:* | 2.6.19.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:* | 2.6.20.16 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:* | 2.6.20.17 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:* | 2.6.20.18 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:* | 2.6.20.19 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:* | 2.6.20.20 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:* | 2.6.20.21 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:* | 2.6.21.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:* | 2.6.21.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:* | 2.6.21.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:* | 2.6.22 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:* | 2.6.22.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:* | 2.6.22.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:* | 2.6.22.8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:* | 2.6.22.9 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:* | 2.6.22.10 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:* | 2.6.22.11 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:* | 2.6.22.12 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:* | 2.6.22.13 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:* | 2.6.22.14 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:* | 2.6.22.15 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:* | 2.6.22.17 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:* | 2.6.22.18 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:* | 2.6.22.19 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:* | 2.6.22.20 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:* | 2.6.22.21 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:* | 2.6.22.22 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:* | 2.6.22_rc1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:* | 2.6.22_rc7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:* | 2.6.23 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:* | 2.6.23.8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:* | 2.6.23.9 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:* | 2.6.23.10 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:* | 2.6.23.11 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:* | 2.6.23.12 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:* | 2.6.23.13 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:* | 2.6.23.15 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:* | 2.6.23.16 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:* | 2.6.23.17 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:* | 2.6.23_rc1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:* | 2.6.24 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:* | 2.6.24.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:* | 2.6.24.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:* | 2.6.24.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:* | 2.6.24.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:* | 2.6.24.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:* | 2.6.24.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:* | 2.6.24.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:* | 2.6.24_rc1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:* | 2.6.24_rc4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:* | 2.6.24_rc5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:* | 2.6.25 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:* | 2.6.25 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:* | 2.6.25.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:* | 2.6.25.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:* | 2.6.25.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:* | 2.6.25.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:* | 2.6.25.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:* | 2.6.25.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:* | 2.6.25.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:* | 2.6.25.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:* | 2.6.25.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:* | 2.6.25.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:* | 2.6.25.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:* | 2.6.25.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:* | 2.6.25.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:* | 2.6.25.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:* | 2.6.25.8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:* | 2.6.25.8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:* | 2.6.25.9 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:* | 2.6.25.9 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:* | 2.6.25.10 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:* | 2.6.25.10 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:* | 2.6.25.11 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:* | 2.6.25.11 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:* | 2.6.25.12 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:* | 2.6.25.12 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:* | 2.6.25.13 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:* | 2.6.25.14 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:* | 2.6.25.15 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:* | 2.6.25.16 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:* | 2.6.25.17 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:* | 2.6.26 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:* | 2.6.26.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:* | 2.6.26.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:* | 2.6.26.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:* | 2.6.26.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:* | 2.6.26.5 | Vulnerable | Linux |
- cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:* Versions 2.6.18 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:* Versions 2.6.18 rc1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:* Versions 2.6.18 rc2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:* Versions 2.6.18 rc3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:* Versions 2.6.18 rc4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:* Versions 2.6.18 rc5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:* Versions 2.6.18 rc6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:* Versions 2.6.18 rc7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:* Versions 2.6.19.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:* Versions 2.6.19.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:* Versions 2.6.19.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:* Versions 2.6.19.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:* Versions 2.6.20.16 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:* Versions 2.6.20.17 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:* Versions 2.6.20.18 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:* Versions 2.6.20.19 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:* Versions 2.6.20.20 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:* Versions 2.6.20.21 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:* Versions 2.6.21.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:* Versions 2.6.21.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:* Versions 2.6.21.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:* Versions 2.6.22 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:* Versions 2.6.22.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:* Versions 2.6.22.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:* Versions 2.6.22.8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:* Versions 2.6.22.9 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:* Versions 2.6.22.10 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:* Versions 2.6.22.11 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:* Versions 2.6.22.12 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:* Versions 2.6.22.13 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:* Versions 2.6.22.14 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:* Versions 2.6.22.15 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:* Versions 2.6.22.17 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:* Versions 2.6.22.18 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:* Versions 2.6.22.19 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:* Versions 2.6.22.20 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:* Versions 2.6.22.21 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:* Versions 2.6.22.22 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:* Versions 2.6.22_rc1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:* Versions 2.6.22_rc7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:* Versions 2.6.23 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:* Versions 2.6.23.8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:* Versions 2.6.23.9 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:* Versions 2.6.23.10 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:* Versions 2.6.23.11 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:* Versions 2.6.23.12 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:* Versions 2.6.23.13 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:* Versions 2.6.23.15 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:* Versions 2.6.23.16 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:* Versions 2.6.23.17 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:* Versions 2.6.23_rc1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:* Versions 2.6.24 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:* Versions 2.6.24.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:* Versions 2.6.24.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:* Versions 2.6.24.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:* Versions 2.6.24.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:* Versions 2.6.24.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:* Versions 2.6.24.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:* Versions 2.6.24.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:* Versions 2.6.24_rc1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:* Versions 2.6.24_rc4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:* Versions 2.6.24_rc5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:* Versions 2.6.25 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:* Versions 2.6.25 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:* Versions 2.6.25.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:* Versions 2.6.25.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:* Versions 2.6.25.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:* Versions 2.6.25.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:* Versions 2.6.25.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:* Versions 2.6.25.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:* Versions 2.6.25.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:* Versions 2.6.25.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:* Versions 2.6.25.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:* Versions 2.6.25.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:* Versions 2.6.25.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:* Versions 2.6.25.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:* Versions 2.6.25.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:* Versions 2.6.25.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:* Versions 2.6.25.8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:* Versions 2.6.25.8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:* Versions 2.6.25.9 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:* Versions 2.6.25.9 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:* Versions 2.6.25.10 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:* Versions 2.6.25.10 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:* Versions 2.6.25.11 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:* Versions 2.6.25.11 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:* Versions 2.6.25.12 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:* Versions 2.6.25.12 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:* Versions 2.6.25.13 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:* Versions 2.6.25.14 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:* Versions 2.6.25.15 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:* Versions 2.6.25.16 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:* Versions 2.6.25.17 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:* Versions 2.6.26 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:* Versions 2.6.26.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:* Versions 2.6.26.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:* Versions 2.6.26.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:* Versions 2.6.26.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:* Versions 2.6.26.5 Vulnerable ·Linux
Remediation
Red Hat 4 advisories
- RHSA-2009:1055 Released 2009-05-20 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux EUS (v. 5.2 server) kernel-2.6.18-92.1.26.el5, kernel-2.6.18-92.1.26.el5.ia64, kernel-PAE-2.6.18-92.1.26.el5 +18
- RHSA-2009:0331 Released 2009-03-12 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-78.0.17.EL, kernel-2.6.9-78.0.17.EL.ia64, kernel-2.6.9-78.0.17.EL.ppc64iseries +14
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-78.0.17.EL, kernel-devel-2.6.9-78.0.17.EL, kernel-doc-2.6.9-78.0.17.EL +8
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-78.0.17.EL, kernel-2.6.9-78.0.17.EL.ia64, kernel-devel-2.6.9-78.0.17.EL +12
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-78.0.17.EL, kernel-2.6.9-78.0.17.EL.ia64, kernel-devel-2.6.9-78.0.17.EL +12
- RHSA-2009:0264 Released 2009-02-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-128.1.1.el5, kernel-2.6.18-128.1.1.el5.ia64, kernel-PAE-2.6.18-128.1.1.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-128.1.1.el5, kernel-PAE-2.6.18-128.1.1.el5, kernel-PAE-devel-2.6.18-128.1.1.el5 +8
Show 1 more Red Hat advisories
- RHSA-2009:0053 Released 2009-02-04 · Red Hat rating Importantkernel-rt security and bug fix update
- MRG Realtime for RHEL 5 Server kernel-rt-2.6.24.7-101.el5rt, kernel-rt-debug-2.6.24.7-101.el5rt, kernel-rt-debug-devel-2.6.24.7-101.el5rt +6
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| MRG Realtime for RHEL 5 Server | Fixed | RHSA-2009:0053 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2009:0264 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2009:0331 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2009:0264 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2009:0331 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2009:0331 |
| Red Hat Enterprise Linux EUS (v. 5.2 server) | Fixed | RHSA-2009:1055 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2009:0331 |
Timeline
- 2026-10-02 Threatist record created from CVE-2009-0065
- 2026-10-03 Alias added: GHSA-w8p6-7232-w86w
References
Advisory 13
Other 8
- http://patchwork.ozlabs.org/patch/15024/
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95
- http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm
- https://bugzilla.redhat.com/show_bug.cgi?id=478800
- ADV-2009-0029
- oval:org.mitre.oval:def:10872
- ADV-2009-2193
- [oss-security] 20090105 CVE request: kernel: sctp: memory overflow when FWD-TSN chunk is received with bad stream ID
More Linux Kernel vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
- TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
Sources
- CVE-2009-0065 · CVE Program
- CVE-2009-0065 · NVD
- FIRST EPSS
- GHSA-w8p6-7232-w86w · GitHub Advisory Database · CC BY 4.0
- CVE-2009-0065 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences