by Kastro
Paper/Archive/CVE-2023-25775

CVE-2023-25775

intel — Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user…

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.3.643 × 2012.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected

ProductAffectedFixed inSource
Intel(R) Ethernet Controller RDMA driver for linuxbefore version 1.9.30–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
intel (CNA)5.6CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00794.htmlrefsecurity.netapp.com/advisory/ntap-20230915-0013reflists.debian.org/debian-lts-announce/2024/01/msg00004.htmlreflists.debian.org/debian-lts-announce/2024/01/msg00005.html