CVE-2009-3280

Integer signedness error in the find_ie function in net/wireless/scan.c in the cfg80211 subsystem in the Linux kernel before 2.6.31.1-rc1 allows remote attackers to cause a denial of service (soft lockup) via malformed packets.

• CWE-119

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fcc6cb0c13555e78c2d47257b6d1b5e59b0c419a
• http://patchwork.kernel.org/patch/45106/Patch, Vendor Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2Patch, Release Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2009/09/16/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/36421Third Party Advisory, VDB Entry
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fcc6cb0c13555e78c2d47257b6d1b5e59b0c419a
• http://patchwork.kernel.org/patch/45106/Patch, Vendor Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2Patch, Release Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2009/09/16/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/36421Third Party Advisory, VDB Entry

Published

Sep 21, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3274Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versi…
• CVE-2009-3275Blocks/Common/Src/Configuration/Manageability/Adm/AdmContent…
• CVE-2009-3276Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinForm…
• CVE-2009-3277DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in data…
• CVE-2009-3278The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613,…5.5
• CVE-2009-3279The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613,…
• CVE-2009-3281The vmx86 kernel extension in VMware Fusion before 2.0.6 bui…
• CVE-2009-3282Integer overflow in the vmx86 kernel extension in VMware Fus…
• CVE-2009-3283Cross-site scripting (XSS) vulnerability in phpspot PHP BBS,…
• CVE-2009-3284Directory traversal vulnerability in phpspot PHP BBS, PHP Im…
• CVE-2009-3286NFSv4 in the Linux kernel 2.6.18, and possibly other version…
• CVE-2009-3287lib/thin/connection.rb in Thin web server before 1.2.4 relie…