Dell iDRAC Tools (improper access control): A low-privileged local attacker escalates privileges through the iDRAC

Impact

A low-privileged local attacker escalates privileges through the iDRAC Tools package on the management workstation or jump host where it is installed.

Who can reach it

Local low-privilege access to a host running iDRAC Tools below 11.3.0.0.

What to do

Upgrade iDRAC Tools to 11.3.0.0. This lives on admin workstations and provisioning servers, not the GPU nodes - so the fix is a management-plane package update, but those hosts hold fleet-wide BMC credentials.

References

Related entries

• AMI AptioV BIOS (out-of-bounds memory operation): Local attacker causes firmware memory corruption impacting integrityCVE-2025-33044 · AMI AptioV BIOS (out-of-bounds memory operation)High
• Linux bnxt_en driver (ethtool coredump / bnxt_get_coredump): Out-of-bounds memcpy when retrieving a firmware coredumpCVE-2025-37911 · Linux bnxt_en driver (ethtool coredump / bnxt_get_coredump)High
• Linux kernel Soft-RoCE completion queue (rdma_rxe, rxe_cq_cleanup on create failure): Syzkaller-found slabCVE-2025-38024 · Linux kernel Soft-RoCE completion queue (rdma_rxe, rxe_cq_cleanup on create failure)High
• Linux KVM/SVM - SEV/SEV-ES intra-host migration during vCPU creation: KVM permitted SEV/SEV-ES intra-host migrationCVE-2025-38455 · Linux KVM/SVM - SEV/SEV-ES intra-host migration during vCPU creationHigh
• Dell iDRAC Service Module (iSM): Buffer access with incorrect length in the in-band agent gives a low-privileged localCVE-2025-38743 · Dell iDRAC Service Module (iSM)High
• Linux bnxt_en driver (ring defaults vs traffic classes on ifdown): Memory corruption when firmware resources changeCVE-2025-39810 · Linux bnxt_en driver (ring defaults vs traffic classes on ifdown)High