Intel-SA01296: Intel Ethernet Driver Multiple Vulnerabilities (LPE/DoS) Advisory

Key Information Vulnerability Overview Intel ID: INTEL-SA01296 Category: Software Severity: High Original Release Date: August 8, 2023 Last Updated: August 8, 2023 Vulnerability Details CVE-2023-42429: Permission check error in Linux kernel mode driver may lead to privilege escalation or denial of service. CVE-2023-27853: Buffer overflow in Linux kernel mode driver may lead to privilege escalation or denial of service. CVE-2023-27854: Input validation issue in Linux kernel mode driver may lead to privilege escalation or denial of service. CVE-2023-27855: Integer overflow in Linux kernel mode driver may lead to privilege escalation or denial of service. CVE-2023-27856: Memory leak in Linux kernel mode driver may lead to privilege escalation or denial of service. CVE-2023-27857: Null pointer dereference in Linux kernel mode driver may lead to privilege escalation or denial of service. CVE-2023-27858: Null pointer dereference in Linux kernel mode driver may lead to privilege escalation or denial of service. CVE-2023-27859: Null pointer dereference in Linux kernel mode driver may lead to privilege escalation or denial of service. CVE-2023-27860: Null pointer dereference in Linux kernel mode driver may lead to privilege escalation or denial of service. Affected Products Intel® Xeon® E-2300/SPR/S Series CPU with iC62x Chipset Intel® Xeon® D-2700N and D-2700 processors Intel® Xeon® D-2700N and D-2700 processors Intel® Atom® Processor C600A/C600B/C600C and N6000 Series Recommendation Update to Intel® 800 Series Ethernet Driver version 1.17.2 or later.

Goal Reached Thanks to every supporter — we hit 100%!

Intel-SA01296: Intel Ethernet Driver Multiple Vulnerabilities (LPE/DoS) Advisory