Description
Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers | See provided reference | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | kernel-uek +5 | 4.1.12-124.39.1.el7uek | ELSA-2020-5670 |
Advisories 1
- ELSA-2020-5670 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · May 6, 2020