by Kastro
Paper/Archive/CVE-2024-24986

CVE-2024-24986

intel ethernet_complete_driver_pack — Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may a…

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
29
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 5.1.051 × 201.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

ProductAffectedFixed inSource
Intel(R) Ethernet Network Controllers and Adaptersbefore version 28.3–CNA
ethernet_complete_driver_pack< 28.328.3CISA-ADP

Scores by source

intel (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
intel (CNA)8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html