by Kastro
Paper/Archive/CVE-2024-23981

CVE-2024-23981

intel ethernet_complete_driver_pack — Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow a…

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
30
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 7.9.079 × 201.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

ProductAffectedFixed inSource
Intel(R) Ethernet Network Controllers and Adaptersbefore version 28.3–CNA
ethernet_complete_driver_pack< 28.328.3CISA-ADP

Scores by source

intel (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
intel (CNA)8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html