Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HIntel Ethernet 700 Series Software
APPIntel< 24.0Intel Ethernet Controller 710 Bm1
HWIntelall versionsIntel Ethernet Controller 710 Bm1 Firmware
OSIntel< 7.0Intel Ethernet Controller X710 At2
HWIntelall versionsIntel Ethernet Controller X710 At2 Firmware
OSIntel< 7.0Intel Ethernet Controller X710 Bm2
HWIntelall versionsIntel Ethernet Controller X710 Bm2 Firmware
OSIntel< 7.0Intel Ethernet Controller X710 Tm4
HWIntelall versionsIntel Ethernet Controller X710 Tm4 Firmware
OSIntel< 7.0Intel Ethernet Controller Xxv710 Am1
HWIntelall versionsIntel Ethernet Controller Xxv710 Am1 Firmware
OSIntel< 7.0Intel Ethernet Controller Xxv710 Am2
HWIntelall versionsIntel Ethernet Controller Xxv710 Am2 Firmware
OSIntel< 7.0Linux Kernel
OSLinux4.6 – 4.9.244 (excl.)4.10 – 4.14.205 (excl.)4.15 – 4.19.139 (excl.)4.20 – 5.2 (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
Related vulnerabilities
CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP
CVE-2022-47986CRITICAL9.8⚠ KEVPL ✓same product
RCE przez YAML deserialization w IBM Aspera Faspex
CVE-2022-22954CRITICAL9.8⚠ KEVPL ✓same product
RCE w VMware Workspace ONE Access i Identity Manager poprzez server-side template injection
CVE-2020-4006CRITICAL9.1⚠ KEVPL ✓same product
Command Injection w VMware Workspace One Access i Identity Manager