Bug#532721: linux-2.6: CVE-2009-1385 dos in e1000 driver

[Moritz Muehlenhoff <jmm@inutil.org>]

Version: 2.6.30-1

On Wed, Jun 10, 5A2009 at 06:45:18PM -0400, Michael S Gilbert wrote:
> Package: linux-2.6
> Severity: important
> Version: 2.6.18.dfsg.1-24 (and newer)
> Tags: security , patch
> 
> Hi,
> the following CVE (Common Vulnerabilities & Exposures) id was
> published for linux-2.6.
> 
> CVE-2009-1385[0]:
> | Integer underflow in the e1000_clean_rx_irq function in
> | drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel
> | before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel
> | Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to
> | cause a denial of service (panic) via a crafted frame size.
> 
> If you fix the vulnerability please also make sure to include the
> CVE id in your changelog entry.

Fixed in 2.6.30.

Cheers,
        Moritz