Skip to content
OpenAdvisories
High · 7.2 CVE-2022-37341 EUVD-2022-39975GHSA-hh4g-rh5c-8w86

Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privile…

Published May 16, 2024 · Updated Aug 3, 2024 · Assigned by intel

Description

Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffectedFixed
— Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware See references —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 linux-firmware No fix yet —
Ubuntu 26.04 LTS linux-firmware No fix yet —
Ubuntu 25.10 linux-firmware No fix yet —
Ubuntu 24.04 LTS linux-firmware No fix yet —
Ubuntu 22.04 LTS linux-firmware No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux-firmware No fix yet —
Ubuntu 14.04 LTS linux-firmware No fix yet —
Ubuntu Pro 20.04 LTS linux-firmware No fix yet —
Ubuntu Pro 18.04 LTS linux-firmware No fix yet —

References