CVE-2009-4538: Debian Linux

High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days.

drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.

Affected products

• Debian Debian Linux: version 4.0 only; version 5.0 only
• Linux Linux Kernel: up to and including 2.6.32.3

Published 2010-01-12. Last modified 2026-06-16.