SB2026021304 - Multiple vulnerabilities in Intel Ethernet Adapters 800 Series

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2025-32003)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in the firmware. A remote user can trigger an out-of-bounds read error and cause a denial of service condition on the system.

2) Out-of-bounds write (CVE-ID: CVE-2025-27243)

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the firmware. A local administrator can trigger an out-of-bounds write and perform a denial of service (DoS) attack.

3) Uncaught Exception (CVE-ID: CVE-2025-24851)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to uncaught exception in the firmware. A local administrator can pass specially crafted input to the application and perform a denial of service (DoS) attack.

4) Exposed IOCTL with Insufficient Access Control (CVE-ID: CVE-2025-27535)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient access control in the IOCTL within the firmware. A local administrator can cause a denial of service condition.

Remediation

Install update from vendor's website.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01171.html