CVE-2024-21810

The CVE-2024-21810 issue affects Intel’s 800 Series Ethernet Linux Kernel Mode Driver prior to version 28.3. The root cause is improper input validation in the Linux kernel mode driver, which could allow an authenticated local attacker to escalate privileges. Public references (Intel advisory, Re...

CVE-2024-22376

Uncontrolled search path element in some installation software for IntelR Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-22376

CVE-2024-22376 concerns an issue in the Intel® Ethernet Adapter Driver Pack software installer. According to Intel’s advisory (INTEL-SA-01106) and corroborating Red Hat/NVD entries, installation software prior to version 28.3 contains an uncontrolled search path element that could allow an authen...

CVE-2024-22376

Uncontrolled search path element in some installation software for IntelR Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

kernel: nfp: flower: handle acti_netdevs allocation failure

A vulnerability was found in the Linux kernel's ethernet lagconf.c driver in the nfpfllagdowork function, where a NULL pointer dereference can occur due to a lack of proper checks. The scenario is caused when the function attempts to call kmallocarray, which returns as NULL because the physical...

kernel: nfp: flower: handle acti_netdevs allocation failure

A vulnerability was found in the Linux kernel's ethernet lagconf.c driver in the nfpfllagdowork function, where a NULL pointer dereference can occur due to a lack of proper checks. The scenario is caused when the function attempts to call kmallocarray, which returns as NULL because the physical...

CVE-2024-21807: Improper Initialization

Improper initialization in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21810: Improper Input Validation

Improper input validation in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-20688 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for IntelR Ethernet Network Controllers and Adapters versions prior to 28.3 Description: The issue is related to improper access control in the Linux kernel mode driver for certain IntelR Ethernet Network Controllers...

CVE-2024-23499: Protection Mechanism Failure

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-24983: Protection Mechanism Failure

Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access...

PT-2024-19899 · Intel +1 · Intel Ethernet Network Controllers/Adapters +1

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters versions prior to 28.3 Description: The issue is an out-of-bounds write in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and...

CVE-2024-22376: Uncontrolled Search Path Element

Uncontrolled search path element in some installation software for IntelR Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21806: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-23497: Out-of-bounds Write

Out-of-bounds write in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-23981: Wrap-around Error

Wrap-around error in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21769: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-24986: Improper Access Control

Improper access control in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-20217 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for IntelR Ethernet Network Controllers and Adapters versions prior to 28.3 Description: A wrap-around error in the Linux kernel mode driver may allow an authenticated user to potentially enable escalation of privileg...

PT-2024-19900 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 28.3 Description: The issue is related to a protection mechanism failure in the Linux kernel mode driver, which may allow an...