K000130240 : Intel BIOS vulnerability CVE-2022-26006

Security Advisory Description

Improper input validation in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2022-26006)

Impact

A local attacker logged in as a privileged user can exploit the vulnerability to compromise the integrity and availability of the system.

The following F5 hardware products are vulnerable to CVE-2022-26006:

• BIG-IP i5000 series
• BIG-IP i7000 series
• BIG-IP i10000 series
• BIG-IP i11000 series
• BIG-IP i15000 series
• VIPRION B4450

All versions of Virtual Edition (VE) for the BIG-IP and BIG-IQ products are potentially impacted if the processors underlying the VE installations are affected.