CVEvulnerability
CVE-2023-25775
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-08-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.6 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-284
Description
Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Affected configurations
• intel ethernet controller rdma driver for linux (< 1.9.30)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html lists.debian.org
- https://security.netapp.com/advisory/ntap-20230915-0013/ security.netapp.com
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html lists.debian.org
- https://security.netapp.com/advisory/ntap-20230915-0013/ security.netapp.com