Intel Ethernet Controller E810 Out-of-Bounds Write Vulnerability Allowing Denial-of-Service

A denial-of-service vulnerability has been identified in the firmware for some Intel Ethernet Controller E810 models, prior to version cvl fw 1.7.8.x, within Ring 0: Bare Metal OS. This vulnerability arises from an out-of-bounds write, which may be exploited by a system software adversary with privileged user access. The attack, characterized by low complexity, can lead to a denial-of-service condition. The issue may occur through local access, without the need for user interaction, and requires no special internal knowledge.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting normal system operations and availability.

Remediation

Users are advised to update the firmware for Intel Ethernet Controller E810 to the latest version. Firmware updates are available for download from the Intel Support website.