CVE-2009-1385

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 33.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-06-04 · updated 2026-06-16
Weakness: CWE-189

Description

Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.

Affected products

Intel E1000: through 7.4.35; 5.2.22, 5.2.30.1, 5.2.52, 5.3.19, 5.4.11, 5.5.4 (+16)
Linux Kernel: 2.6.24.7, 2.6.25.15
Linux kernel: through 2.6.28; through 2.6.30; 2.2.27, 2.4.36, 2.4.36.1, 2.4.36.2, 2.4.36.3, 2.4.36.4 (+101)

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea30e11970a96cfe5e32c03a29332554573b4a10
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html
http://osvdb.org/54892
http://secunia.com/advisories/35265
http://secunia.com/advisories/35566
http://secunia.com/advisories/35623
http://secunia.com/advisories/35656
http://secunia.com/advisories/35847
http://secunia.com/advisories/36051
http://secunia.com/advisories/36131
http://secunia.com/advisories/36327
http://secunia.com/advisories/37471

Get alerted when CVE-2009-1385 or the next vulnerability affects your stack