Intel Ethernet Controller E810 Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the firmware for some 100GbE Intel Ethernet Controller E810, prior to version cvl fw 1.7.8.x, within Ring 0: Bare Metal OS. The vulnerability arises from an uncaught exception, which may allow a system software adversary with privileged user access to disrupt service. This issue can potentially be exploited through local access, without special internal knowledge, and requires no user interaction.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing a significant disruption in network availability.

Remediation

Users are advised to update the firmware for Intel Ethernet Adapters 800 Series Controllers and associated adapters to the latest version. Firmware updates are available for download from the Intel Support page for Ethernet E810 Controllers up to 100GbE.