Intel ice driver (Ethernet 800 Series, Linux kernel mode): A protection-mechanism failure in the E810 Linux kernel

CVSS 6.5CVE-2024-23499Kernel, userspace & hypervisorcurated

Impact

A protection-mechanism failure in the E810 Linux kernel driver reachable by an unauthenticated attacker. Driver-side counterpart to the E810 firmware protection failures in the same advisory.

Who can reach it

Unauthenticated attacker able to present traffic to the interface.

What to do

Fixed in the Intel out-of-tree ice driver (or the equivalent in-kernel version). Updating the driver requires unloading and reloading the module, which drops every link on that NIC - on a node whose RDMA fabric carries collective traffic, that is a job-killing event, so drain first. If you take it via a distro kernel update instead, it is a reboot. No firmware flash for the driver-side fixes. Target ice 28.3 or later.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-23499 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.