Intel Ethernet Adapters Vulnerable to Out-of-bounds Write Attack

CVE-2024-23497

What is CVE-2024-23497?

A vulnerability exists in the Linux kernel mode driver for various Intel Ethernet Network Controllers and Adapters, which before version 28.3, is susceptible to an out-of-bounds write condition. This flaw may allow an authenticated user with local access to the system to exploit the vulnerability, potentially leading to escalation of privilege and unauthorized control over system resources.

References