CVE-2024-24986

The vulnerability results from improper access control in a driver operating in Linux kernel mode (kernel mode driver). An authenticated local user can exploit this flaw to obtain higher privileges than assigned to them. The attack vector is local, meaning the attacker must have access to a system with the vulnerable driver installed. Due to the lack of detailed mechanism description from the vendor, the exact exploitation method is not publicly known.

Successful exploitation of this vulnerability allows an authenticated local user to perform privilege escalation — potentially obtaining kernel-level operating system privileges. This can lead to complete system takeover, violation of confidentiality, integrity, and availability of both the local system and associated infrastructure.

Update the driver to version 28.3 or later. Detailed information and update files are available in the Intel security advisory INTEL-SA-00918 at: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html

Linux kernel mode driver for Intel Ethernet Network Controllers and Adapters — driver versions before 28.3 (applies to Intel Ethernet 800 Series Controllers Driver)