PT-2025-6661 · Intel · Intel 800 Series Ethernet Driver

Published 2025-02-11 · Updated 2025-02-13 · CVE-2024-39286

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) 800 Series Ethernet Driver versions prior to 1.15.4

Description The issue is related to incorrect execution-assigned permissions in the Linux kernel mode driver. This may allow an authenticated user to potentially enable information disclosure via local access.

Recommendations For versions prior to 1.15.4, update to version 1.15.4 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-279

Related Identifiers

BDU:2025-02233

CVE-2024-39286

Affected Products

Intel 800 Series Ethernet Driver

References · 7

• https://ubuntu.com/security/CVE-2024-39286 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02233 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-39286 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-39286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39286 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01236.html · Note
• https://twitter.com/CVEnew/status/1890046696102453477 · Twitter Post