Intel® Ethernet Controllers and Adapters Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Controllers and Adapters may allow escalation of privilege or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-21810...

CVE-2024-28947

Improper input validation in kernel mode driver for some IntelR Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-28947

Improper input validation in kernel mode driver for some IntelR Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21806: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-28947: Improper Input Validation

Improper input validation in kernel mode driver for some IntelR Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23497: Out-of-bounds Write

Out-of-bounds write in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21807: Improper Initialization

Improper initialization in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-23499: Protection Mechanism Failure

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

Talos discovers Microsoft kernel mode driver vulnerabilities that could lead to SYSTEM privileges; Seven other critical issues disclosed

Microsoft disclosed six security vulnerabilities that are actively being exploited across its products as part of the companys regular Patch Tuesday security update. In all, Augusts monthly round of patches from Microsoft included 87 vulnerabilities, seven of which are considered critical. In...

CVE-2024-38186

Technical details (affected product, root cause, impact, versions, or remediation) for CVE-2024-38186 are not provided in the connected documents. Monitor for updates.

CVE-2024-38186 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2024-38187: Untrusted Pointer Dereference

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-38185: Untrusted Pointer Dereference

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-38184: Out-of-bounds Read

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

PT-2024-6179 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to an Elevation of Privilege vulnerability in the Windows Kernel-Mode Driver. It is caused by synchronization errors when using a shared resource,...

CVE-2024-38186: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

PT-2024-6178 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver versions prior to 10.0.22000.3079 Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel-Mode Driver, which can be exploited due to the dereferencing of an untrusted...

PT-2024-5988 · Microsoft · Windows 10 +1

Name of the Vulnerable Software and Affected Versions: microsoft windows 10 1607 versions 10.0.14393.7159 Description: The issue is related to a buffer overflow in the Windows Kernel-Mode Driver, which can allow an attacker to elevate their privileges to the level of SYSTEM. This is an...