Vulnerability · Published Aug 11, 2023 · Assigned by intel

CVE-2023-25775

Medium 5.6

In plain English

A medium-severity improper access control in Intel(R) Ethernet Controller RDMA driver for linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 64% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.6Medium
Exploit odds (30 days)1.1%top 35.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9bpftool7.3.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-debug5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-debug-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-debug-devel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-debug-modules5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-devel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-devel-matched5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-modules5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-modules-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-64k-modules-extra5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-abi-stablelists4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-abi-stablelists5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-core4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-cross-headers4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-cross-headers5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-debug4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-debug-core4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-debug-devel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug-devel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-debug-devel-matched5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-debug-modules4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug-modules5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-debug-modules-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug-modules-extra5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-debug-uki-virt5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-devel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-devel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-devel-matched5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-doc4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-doc5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-headers4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-headers5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-modules4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-modules5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-modules-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-modules-extra4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-modules-extra5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-core4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-debug4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-debug-core4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug-devel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-debug-kvm4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug-modules5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-devel4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-devel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-kvm4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:8kernel-rt-modules4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-modules5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-rt-modules-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-modules-extra5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-tools4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-tools5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-tools-libs4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-tools-libs5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-tools-libs-devel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-uki-virt5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-zfcpdump4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump-devel5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump-modules5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9libperf5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8perf4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9perf5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:8python3-perf4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9python3-perf5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9rtla5.14.0-427.13.1.el9_4ALSA-2024:2394
AlmaLinux:9rv5.14.0-427.13.1.el9_4ALSA-2024:2394
Debian:12linux6.1.55-1DEBIAN-CVE-2023-25775
Debian:13linux6.5.3-1DEBIAN-CVE-2023-25775
Debian:14linux6.5.3-1DEBIAN-CVE-2023-25775
Rocky Linux:8kernel0:4.18.0-553.123.1.el8_10.cloud.0.1RXSA-2024:3138
Rocky Linux:8kernel0:4.18.0-553.el8_10RLSA-2024:3138
Rocky Linux:8kernel-rt0:4.18.0-553.rt7.342.el8_10RLSA-2024:2950
Ubuntu:22.04:LTSlinux5.15.0-89.99UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux5.15.0-89.99USN-6496-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-aws5.15.0-1050.55USN-6496-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1050.55UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-aws-6.26.2.0-1016.16~22.04.1USN-6502-1
Ubuntu:22.04:LTSlinux-aws-6.26.2.0-1016.16~22.04.1UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-azure5.15.0-1052.60UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-azure5.15.0-1052.60USN-6496-2
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-azure-6.26.2.0-1017.17~22.04.1USN-6502-4
Ubuntu:22.04:LTSlinux-azure-6.26.2.0-1017.17~22.04.1UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1052.60.1USN-6496-2
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1052.60.1UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-azure-fde-6.26.2.0-1017.17~22.04.1.1UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-azure-fde-6.26.2.0-1017.17~22.04.1.1USN-6502-4
Ubuntu:22.04:LTSlinux-gcp5.15.0-1047.55UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-gcp5.15.0-1047.55USN-6496-2
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-gcp-6.26.2.0-1019.21~22.04.1UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-gcp-6.26.2.0-1019.21~22.04.1USN-6502-4
Ubuntu:22.04:LTSlinux-gke5.15.0-1047.52USN-6496-2
Ubuntu:22.04:LTSlinux-gke5.15.0-1047.52UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1033.39USN-6496-2
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1033.39UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-hwe-6.26.2.0-37.38~22.04.1UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-hwe-6.26.2.0-37.38~22.04.1USN-6502-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1043.46UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-ibm5.15.0-1043.46USN-6496-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1045.51USN-6516-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1045.51UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-kvm5.15.0-1047.52UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-kvm5.15.0-1047.52USN-6496-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-89.99USN-6496-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-89.99UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.26.2.0-1017.17~22.04.1USN-6502-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.26.2.0-1017.17~22.04.1UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1041.41USN-6496-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1041.41UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-nvidia-6.26.2.0-1012.12UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-nvidia-6.26.2.0-1012.12USN-6502-3
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1020.20UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1007.7UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1023.23UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1023.23USN-6415-1
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1004.4UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-oracle5.15.0-1048.54UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-oracle5.15.0-1048.54USN-6496-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1043.46USN-6496-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1043.46UBUNTU-CVE-2023-25775
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-starfive-6.26.2.0-1009.10~22.04.1UBUNTU-CVE-2023-25775
Ubuntu:22.04:LTSlinux-starfive-6.26.2.0-1009.10~22.04.1USN-6520-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1027.31UBUNTU-CVE-2023-25775

Affected products (as reported)

VendorProductVersions
n/a Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30

Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

References