CVE-2009-4538

Publication date 12 January 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.

Read the notes from the security team

Status

Package Ubuntu Release Status
linux 9.10 karmic
Fixed in 2.6.31-19.56
9.04 jaunty
Fixed in 2.6.28-18.59
8.10 intrepid
Fixed in 2.6.27-17.45
8.04 LTS hardy
Fixed in 2.6.24-27.65
6.06 LTS dapper Not in release
linux-source-2.6.15 9.10 karmic Not in release
9.04 jaunty Not in release
8.10 intrepid Not in release
8.04 LTS hardy Not in release
6.06 LTS dapper
Not affected

Notes

mdeslaur

same patch as CVE-2009-4536, but applied to e1000e

References

Related Ubuntu Security Notices (USN)

    • USN-894-1
    • Linux kernel vulnerabilities
    • 5 February 2010

Other references

Access our resources on patching vulnerabilities