Intel E810 Ethernet controller firmware: Improper input validation in E810 firmware lets a privileged local user deny

Impact

Improper input validation in E810 firmware lets a privileged local user deny service on the adapter. On a node whose NIC carries collective traffic, denying the NIC denies the job.

Who can reach it

Privileged local access on the host.

What to do

Fixed in the E810 NVM (adapter firmware) image. Deploy with Intel's NVM Update Utility, which needs a driver reload and a power cycle - not just a warm reboot - for the new image to take effect. Drain the node. Distinct from the ice driver updates: you need both, and they ship on different schedules. Target E810 firmware 4.6 or later.

References

Related entries

• Intel Ethernet Controller E810 (100GbE) firmware: Uncaught exception in 100GbE E810 firmware, reachable from privilegedCVE-2025-24851 · Intel Ethernet Controller E810 (100GbE) firmwareMedium
• Intel Ethernet Controller E810 firmware: Out-of-bounds write inside E810 firmware, reachable from a privileged Ring-0CVE-2025-27243 · Intel Ethernet Controller E810 firmwareMedium
• HPE ProLiant RL300 Gen11 (UEFI firmware, out-of-bounds read): Out-of-bounds reads in the UEFI firmware of the ProLiantCVE-2025-37149 · HPE ProLiant RL300 Gen11 (UEFI firmware, out-of-bounds read)Medium
• NVIDIA DGX Spark: out-of-bounds read in standalone MM firmware discloses information across a scope boundaryCVE-2026-24225 · NVIDIA DGX Spark (standalone MM firmware)Medium
• NVIDIA DGX Spark: UEFI administrator password protection can be bypassed by a privileged local userCVE-2026-47624 · NVIDIA DGX Spark (UEFI administrator password protection)Medium
• Arista EOS: gNPSI client credentials can be written in clear text to accounting logsCVE-2026-73457 · Arista EOS gNPSI (client credentials in accounting logs)Medium