Skip to content
OpenAdvisories
Unscored CVE-2020-24503 EUVD-2020-17223GHSA-c6gw-7j5j-4c6v

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user t…

Published Feb 17, 2021 · Updated Aug 4, 2024 · Assigned by intel

Description

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.

Affected products

VendorProductAffectedFixed
— Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS linux-riscv +1 No fix yet —
Ubuntu 18.04 LTS linux-gcp +13 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS linux +3 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-348.rt7.130.el8 RHSA-2021:4140
RHEL 8 perf +26 4.18.0-348.el8 RHSA-2021:4356

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 kernel-tools-libs-devel 4.18.0-348.el8 ALSA-2021:4356

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-348.el8 ELSA-2021-4356
Oracle Linux 7 kernel-uek +4 5.4.17-2136.307.3.1.el8uek ELSA-2022-9365
Oracle Linux 7 kernel-uek-container +1 5.4.17-2136.307.3.1.el8 ELSA-2022-9368
Oracle Linux 7 perf +3 5.4.17-2136.307.3.1.el7uek ELSA-2022-9365

Advisories 6

References