by Kastro
Paper/Archive/CVE-2024-23497

CVE-2024-23497

intel ethernet_complete_driver_pack — Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow…

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
30
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 7.9.079 × 201.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

ProductAffectedFixed inSource
Intel(R) Ethernet Network Controllers and Adaptersbefore version 28.3–CNA
ethernet_complete_driver_pack< 28.328.3CISA-ADP

Scores by source

intel (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
intel (CNA)8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html