Description
drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-21lenny3 | DSA-1996-1 |
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.9etch3 | DSA-2005-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +11 | 2.6.18-164.10.1.el5 | RHSA-2010:0019 |
| RHEL 5 | rhev-hypervisor +1 | 5.4-2.1.8.el5_4rhev2_1 | RHSA-2010:0095 |
| RHEL 4 | kernel +10 | 2.6.9-89.0.19.EL | RHSA-2010:0020 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5.3 EUS | kernel +11 | 2.6.18-128.12.1.el5 | RHSA-2010:0053 |
| RHEL 5.2 EUS | kernel +11 | 2.6.18-92.1.35.el5 | RHSA-2010:0079 |
| RHEL 4.7 EUS | kernel +10 | 2.6.9-78.0.29.EL | RHSA-2010:0111 |
| Red Hat MRG 1 | kernel-rt +9 | 2.6.24.7-146.el5rt | RHSA-2010:0041 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 4.8.13-1.1 | openSUSE-SU-2024:10128-1 |
Advisories 10
- RHSA-2010:0111 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0095 Red Hat Security Advisory: rhev-hypervisor security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0079 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0053 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0041 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0020 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0019 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-1996-1 linux-2.6 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2005-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10128-1 kernel-debug-4.8.13-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 38276 third-party-advisory
- 1023420 vdb-entry
- SUSE-SA:2010:007 vendor-advisory
- kernel-edriver-unspecified(55645) vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=551214
- RHSA-2010:0111 vendor-advisory
- 38779 third-party-advisory
- 38296 third-party-advisory
- SUSE-SA:2010:012 vendor-advisory
- RHSA-2010:0053 vendor-advisory
- SUSE-SA:2010:014 vendor-advisory
- DSA-1996 vendor-advisory
- RHSA-2010:0019 vendor-advisory
- [oss-security] 20091228 CVE requests - kernel security regressions for CVE-2009-1385/and -1389 mailing-list
- FEDORA-2010-1787 vendor-advisory
- MDVSA-2010:066 vendor-advisory
- [oss-security] 20091229 Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389 mailing-list
- RHSA-2010:0095 vendor-advisory
- SUSE-SA:2010:005 vendor-advisory
- [oss-security] 20091231 Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389 mailing-list
- oval:org.mitre.oval:def:9702 vdb-entry signature
- RHSA-2010:0020 vendor-advisory
- 38031 third-party-advisory
- 37523 vdb-entry
- 38610 third-party-advisory
- oval:org.mitre.oval:def:7016 vdb-entry signature
- DSA-2005 vendor-advisory
- SUSE-SA:2010:010 vendor-advisory
- RHSA-2010:0041 vendor-advisory
- 38492 third-party-advisory