CVE-2015-2291

CVE-2015-2291 1 版本低于 1.3.1.0 的 IQVW32.sys 和 2 版本低于 1.3.1.0 的 IQVW64.sys（位于 Windows 版 Intel 以太网诊断驱动程序中）允许本地用户通过特制的 a 0x80862013、b 0x8086200B、c 0x8086200F 或 d 0x80862007 IOCTL 调用导致拒绝服务，或可能以内核权限执行任意代码。 概述 本仓库包含针对该漏洞的分析文章，以及可在 64 位 Windows 7 SP1 和 Windows 10 20H2 上运行的概念验证（PoC）漏洞利用代码。驱动程序文件位于 Driver...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 本地权限提升 PoC 概述 本项目是针对驱动 iqvw64e.sys（SHA256：37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9）中一个本地权限提升（LPE）漏洞的教育性概念验证——该驱动是英特尔以太网诊断驱动程序，关联 CVE-2015-2291 。 在见到该驱动被内核级加载器（如 KDMapper ）利用后，我想自己逆向它，以了解 IOCTL 分发的工作原理...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

ROS-20260929-73-0173

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker ...

ROS-20260929-73-0170

The vulnerability of the iavfconfigrssreg function in the driver/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

ROS-20260924-73-0068

The vulnerability of the i40evalidatecloudfilter function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacke...

ROS-20260924-73-0069

The vulnerability of the i40evcconfigqueuesmsg function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c module of the Intel Ethernet network adapter driver for the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: stmmac: intel: A missing clkdisableunprepare call was added to intelethpciremove. The commit 09f012e64e4b “stmmac: intel: Fix clock handling on error and remove paths” removed this clkdisableunprepare call. This issue was partial...

ROS-20260828-73-0012

The vulnerability of the iavfallocqvectors function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

The vulnerability of the libie_fwlog_deinit() function in the drivers/net/ethernet/intel/libie/fwlog.c source code of the Ethernet driver for Intel’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the libiefwlogdeinit function in the drivers/net/ethernet/intel/libie/fwlog.c source code of the Ethernet driver for Intel’s Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260806-73-0031

The vulnerability of the i40evsirequestirqmsix function in the drivers/net/ethernet/intel/i40e/i40emain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect index. Exploiting this vulnerability could allow an attacker to compromi...

ROS-20260629-73-0041

The vulnerability of the igbioerrordetected function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ice: Fixed NULL pointer dereferencing in icevsisetnapiqueues. Added NULL pointer checks in icevsisetnapiqueues to prevent crashes during resume from suspend when ringsqidx-qvector is NULL. Tested adapter: 60:00.0 Ethernet...

CVE-2025-27723

Use after free for some Linux kernel driver for the IntelR Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: igb: Fixed string truncation warnings in igbsetfwversion. Commit 1978d3ead82c “intel: fixed string truncation warnings” fixes the warning “-Wformat-truncation=” in igbmain.c by using kasprintf...

EUVD-2025-209789

Use after free for some Linux kernel driver for the IntelR Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2025-27723

Use after free for some Linux kernel driver for the IntelR Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2025-27723

Use after free for some Linux kernel driver for the IntelR Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2025-27723

The CVE-2025-27723 entry describes a use-after-free in the Linux kernel driver for Intel Ethernet 800 series, prior to version 2.3.14. The issue affects the Ring 0 kernel path and can allow a denial-of-service condition with high impact to availability. Exploitation requires a local, authenticate...

Intel Ethernet 800-Series 资源管理错误漏洞

Intel Ethernet 800-Series is a series of network adapters developed by the American company Intel. Versions prior to 2.3.14 of Intel Ethernet 800-Series contained a resource management vulnerability caused by reusing resources after they were released, which could lead to a denial-of-service atta...