CVE-2024-23497

9.3 criticalEPSS 0.2%

Critical (9.3) in intel ethernet 800 series controllers driver. EPSS 0.2% chance of exploitation in the next 30 days.

Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CVSS 3.1

8.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2024-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intel:ethernet_800_series_controllers_driver

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html

Check your stack JSON