Paper/Archive/CVE-2025-24325

CVE-2025-24325

intel — Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authen…

EPSS 0.1%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 3.6.036 × 200.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

ProductAffectedFixed inSource

Intel(R) 800 Series Ethernetbefore version 1.17.2–CNA

Scores by source

intel (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

intel (CNA)8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html