LWN.net Logo

kernel: arbitrary code execution

Package(s):kernel CVE #(s):CVE-2009-1385
Created:February 3, 2010 Updated:February 3, 2010
Description:

From the Red Hat advisory:

A flaw was found in the Intel PRO/1000 Linux driver (e1000) in the Linux kernel. Frames with sizes near the MTU of an interface may be split across multiple hardware receive descriptors. Receipt of such a frame could leak through a validation check, leading to a corruption of the length check. A remote attacker could use this flaw to send a specially-crafted packet that would cause a denial of service or code execution. (CVE-2009-1385, Important)

Alerts:
Red Hat RHSA-2010:0079-01 2010-02-02

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds