CVE Vulnerabilities

CVE-2024-23981

Wrap-around Error

Published: Aug 14, 2024 | Modified: Sep 06, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness

Wrap around errors occur whenever a value is incremented past the maximum value for its type and therefore “wraps around” to a very small, negative, or undefined value.

Affected Software

Name Vendor Start Version End Version
Ethernet_800_series_controllers_driver Intel * 28.3 (excluding)

Potential Mitigations

References