CVE-2023-25775

kernel: irdma: Improper access control

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

El control de acceso incorrecto en el Intel(R) Ethernet Controller RDMA driver para Linux antes de la versión 1.9.30 puede permitir que un usuario no autenticado habilite potencialmente la escalada de privilegios a través del acceso a la red.

An improper access control flaw was found in the Intel(R) Ethernet Controller RDMA driver in the Linux Kernel. This flaw allows an unauthenticated user to enable privilege escalation via network access.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-02-24 CVE Reserved
2023-08-11 CVE Published
2024-08-02 CVE Updated
2024-09-12 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-284: Improper Access Control

CAPEC

References (6)

URL	Tag	Source
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
https://security.netapp.com/advisory/ntap-20230915-0013

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html	2024-01-11
https://access.redhat.com/security/cve/CVE-2023-25775	2024-05-22
https://bugzilla.redhat.com/show_bug.cgi?id=2231410	2024-05-22

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Intel Search vendor "Intel"		Ethernet Controller Rdma Driver For Linux Search vendor "Intel" for product "Ethernet Controller Rdma Driver For Linux"				< 1.9.30 Search vendor "Intel" for product "Ethernet Controller Rdma Driver For Linux" and version " < 1.9.30"		-		Affected