01 Record

CVE-2009-4272

A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 11.05% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 95.5% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2010-01-27 17:00Z16 YR AGO

Last updated

2024-08-07 06:54Z2 YR AGO

Reserved

2009-12-10

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-667Improper LockingClass
CWE-833DeadlockBase

Data version

5.1

Document digest

8d92473a77c8657a87ecebdfa4499f94491e5f34d55c8e80b0a98c78d65fab89

05 Affected products

VendorProductVersionsPlatforms

linuxlinux_kernelNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatenterprise_linux_eusNot specified—

redhatenterprise_linux_serverNot specified—

redhatenterprise_linux_workstationNot specified—

redhatvirtualizationNot specified—

06 References

bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=545411x_refsource_CONFIRM
www.kernel.orghttp://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31x_refsource_CONFIRM
support.avaya.comhttp://support.avaya.com/css/P8/documents/100073666x_refsource_CONFIRM
exchange.xforce.ibmcloud.comlinux-kernel-routing-dos(55808)https://exchange.xforce.ibmcloud.com/vulnerabilities/55808vdb-entryx_refsource_XF
www.openwall.com[oss-security] 20100120 CVE-2009-4272 kernel: emergency route cache flushing leads to node deadlockhttp://www.openwall.com/lists/oss-security/2010/01/20/1mailing-listx_refsource_MLIST
git.kernel.orghttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b6280b47a7a42970d098a3059f4ebe7e55e90d8dx_refsource_CONFIRM
oval.cisecurity.orgoval:org.mitre.oval:def:11167https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11167vdb-entrysignaturex_refsource_OVAL
rhn.redhat.comRHSA-2010:0095https://rhn.redhat.com/errata/RHSA-2010-0095.htmlvendor-advisoryx_refsource_REDHAT
oval.cisecurity.orgoval:org.mitre.oval:def:7026https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7026vdb-entrysignaturex_refsource_OVAL
rhn.redhat.comRHSA-2010:0046https://rhn.redhat.com/errata/RHSA-2010-0046.htmlvendor-advisoryx_refsource_REDHAT
www.openwall.com[oss-security] 20100120 Re: CVE-2009-4272 kernel: emergency route cache flushing leads to node deadlockhttp://www.openwall.com/lists/oss-security/2010/01/20/6mailing-listx_refsource_MLIST
git.kernel.orghttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=73e42897e8e5619eacb787d2ce69be12f47cfc21x_refsource_CONFIRM