Description
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kernel +8 | 2.4.21-15.0.4.EL | RHSA-2004:413 |
Advisories 1
- RHSA-2004:413 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 10352 vdb-entry
- RHSA-2004:413 vendor-advisory
- RHSA-2004:418 vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log
- FEDORA-2004-186 vendor-advisory
- CLA-2004:845 vendor-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168
- MDKSA-2004:062 vendor-advisory
- linux-e1000-bo(16159) vdb-entry
- GLSA-200407-02 vendor-advisory
- oval:org.mitre.oval:def:11136 vdb-entry signature
- SUSE-SA:2004:020 vendor-advisory