Secunia

Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) A vulnerability is caused due to an error in the "e1000_clean_rx_irq()" function in drivers/net/e1000/e1000_main.c. This can be exploited to cause a kernel panic via specially crafted network packets sent to an affected system.

2) A vulnerability is caused due to an error within the RTL8169 driver when receiving overly large network packets. This can be exploited to cause a kernel panic via specially crafted network packets sent to an affected system.

3) A vulnerability is caused due to an error in the "e1000_clean_rx_irq()" function in drivers/net/e1000e/netdev.c. This can be exploited to cause a kernel panic via specially crafted network packets sent to an affected system.

Solution
Update to version 2.6.32.8.

Provided and/or discovered by
1) Neil Horman
2) Michael Tokarev
3) Eugene Teo, Red Hat

Incomplete fixes noticed by Fabian Yamaguchi.

Changelog
Further details available in Customer Area

Original Advisory
1) http://git.kernel.org/linus/ea30e11970a96cfe5e32c03a29332554573b4a10
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=40a14deaf411592b57cb0720f0e8004293ab9865
2) http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=fdd7b4c3302c93f6833e338903ea77245eb510b4
3) https://bugzilla.redhat.com/show_bug.cgi?id=551214
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b94b50289622e816adc9f94111cfc2679c80177c

Deep Links
Links available in Customer Area