Incorrect Execution-Assigned Permissions in Intel 800 Series Ethernet Linux Kernel Mode Driver and Intel Ethernet Adapter Complete Driver Pack - CVE-2024-39286

Vulnerability identifier: #VU104004

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-39286

CWE-ID: CWE-279

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to incorrect execution-assigned permissions. A local user can gain unauthorized access to sensitive information on the system.

Intel 800 Series Ethernet Linux Kernel Mode Driver
ThinkSystem SR258 V2
ThinkSystem SD665 V3
ThinkSystem SE350
ThinkSystem SN550
ThinkSystem SN850
ThinkSystem SR150
ThinkSystem SR158
ThinkSystem SR250
ThinkSystem SR250 V2
ThinkSystem SR250 V3
ThinkSystem SR258
ThinkSystem SD650-N V3
ThinkSystem SR258 V3
ThinkSystem SR530
ThinkSystem SR550
ThinkSystem SR570
ThinkSystem SR590
ThinkSystem SR630
ThinkSystem SR630 V2
ThinkSystem SR630 V3
ThinkSystem SR635
ThinkServer SR860P
ThinkPad P16s Gen 3 21KT
ThinkPad P16v Gen 2 21KX
ThinkPad P16v Gen 2 21KY
ThinkPad T14 Gen 5 21ML
ThinkPad T14 Gen 5 21MM
ThinkPad T16 Gen 3 21MN
ThinkPad T16 Gen 3 21MQ
ThinkPad X13 Yoga Gen 1 20SX
ThinkPad X13 Yoga Gen 1 20SY
ThinkServer SR590/SR588
ThinkSystem SR635 V3
ThinkSystem ST250 V3
ThinkSystem SD530
ThinkSystem SD530 V3
ThinkSystem SD535 V3
ThinkSystem SD550 V3
ThinkSystem SD630 V2
ThinkSystem SD650 DWC Dual Node Tray
ThinkSystem SD650 V3
ThinkSystem SD650-I V3
ThinkSystem ST558
ThinkSystem SR950 V3
ThinkSystem ST250
ThinkSystem ST250 V2
ThinkSystem ST258
ThinkSystem ST258 V2
ThinkSystem ST258 V3
ThinkSystem ST50
ThinkSystem ST50 V2
ThinkSystem ST50 V3
ThinkSystem ST550
ThinkSystem SR950
ThinkSystem ST58
ThinkSystem ST58 V2
ThinkSystem ST58 V3
ThinkSystem ST650 V2
ThinkSystem ST650 V3
ThinkSystem ST658 V2
ThinkSystem ST658 V3
WH5900 Appliance
Intel E810 Adapters and Intel E823 LOM
ThinkSystem SR670
ThinkSystem SR645
ThinkSystem SR645 V3
ThinkSystem SR650
ThinkSystem SR650 V2
ThinkSystem SR650 V3
ThinkSystem SR655
ThinkSystem SR655 V3
ThinkSystem SR665
ThinkSystem SR665 V3
ThinkPad P16s Gen 3 21KS
ThinkSystem SR670 V2
ThinkSystem SR675 V3
ThinkSystem SR850
ThinkSystem SR850 V2
ThinkSystem SR850 V3
ThinkSystem SR850P
ThinkSystem SR860
ThinkSystem SR860 V2
ThinkSystem SR860 V3
ThinkAgile HX3320 Appliance
System x3950 X6
ThinkAgile VX3331 Certified Node
ThinkAgile HX1320 Appliance
ThinkAgile HX1321 Certified Node
ThinkAgile HX1520-R Appliance
ThinkAgile HX1521-R Certified Node
ThinkAgile HX2320 Appliance
ThinkAgile HX2320-E Appliance
ThinkAgile HX2321 Certified Node
ThinkAgile HX2720-E Appliance
System x3850 X6
ThinkAgile HX3321 Certified Node
ThinkAgile HX3520-G Appliance
ThinkAgile HX3521-G Certified Node
ThinkAgile HX3720 Appliance
ThinkAgile HX3721 Certified Node
ThinkAgile HX5520 Appliance
ThinkAgile HX5520-C Appliance
ThinkAgile HX5521 Certified Node
ThinkAgile HX5521-C Certified Node
ThinkSmart One & IP Controller: Microsoft Teams Rooms
Converged HX1310 Appliance
Converged HX2310-E Appliance
Converged HX3310 Nutanix Appliance
Converged HX3310-F Appliance
Converged HX3510-G Appliance
Converged HX5510 Appliance
Converged HX5510-C Appliance
Converged HX7510 Appliance
ThinkAgile HX7520 Appliance
ThinkSmart One & IP Controller: Zoom Rooms
ThinkSmart One & ThinkSmart Controller: Microsoft Teams Rooms
ThinkSmart One & ThinkSmart Controller: Zoom Rooms
NeXtScale Compute Node - nx360 M5
System x3250 M6
System x3500 M5
System x3550 M5
System x3650 M5
System x3750 M4
ThinkAgile VX7520
ThinkAgile VX3376 Certified Node
ThinkAgile VX3520-G
ThinkAgile VX3530-G Appliance
ThinkAgile VX3575-G Integrated System
ThinkAgile VX3720
ThinkAgile VX5520
ThinkAgile VX5530 Appliance
ThinkAgile VX7320 N
Thinkagile VX7330 Appliance
ThinkAgile VX7375-N Integrated System
ThinkAgile VX3375 Integrated System
ThinkAgile VX7520 N
ThinkAgile VX7530 Appliance
ThinkAgile VX7531 Certified Node
ThinkAgile VX7575 Integrated System
ThinkAgile VX7820
ThinkEdge SE450
ThinkEdge SE455 V3
ThinkPad P14s Gen 5 21G2
ThinkPad P14s Gen 5 21G3
ThinkAgile VX 2U Certified Node
ThinkAgile HX7521 Certified Node
ThinkAgile HX7820 Appliance
ThinkAgile HX7821 Certified Node
ThinkAgile MX 1U - MX3321 F
ThinkAgile MX 1U - MX3321 H
ThinkAgile MX Certified Node – All Flash
ThinkAgile MX Certified Node – Hybrid
ThinkAgile VX 1SE Certified Node
ThinkAgile VX 1U Certified Node
ThinkAgile VX 2U4N Certified Node
ThinkAgile VX 4U Certified Node
ThinkAgile VX Enclosure
ThinkAgile VX1320
ThinkAgile VX2320
ThinkAgile VX2330 Appliance
ThinkAgile VX2375 Integrated System
ThinkAgile VX3320
ThinkAgile VX3330 Appliance
Intel Ethernet Adapter Complete Driver Pack
Intel PRO1000 LAN Adapter Software for Windows 10 (Version 21H2 or later) - ThinkPad P16v Gen 2 (Type 21KX, 21KY)
Intel PRO1000 LAN Adapter Software for Windows 10 (Version 21H2 or later) - ThinkPad T14 Gen 5 (Type 21ML, 21MM), T16 Gen 3 (Type 21MN, 21MQ)
Intel Ethernet Driver for Windows 10 (Version 21H2 or later) - ThinkPad P14s Gen 5 (Type 21G2, 21G3), P16s Gen 3 (Type 21KS, 21KT)
Intel Lan Driver for Windows 11 IoT 64-bit (version 22H2) - ThinkSmart One MTR
Intel Lan Driver for Windows IoT 10 (64-bit) (version 21H2, 22H2) - ThinkSmart One Series
Intel Lan Driver for Windows 11 IoT 64-bit (version 22H2) - ThinkSmart One ZOOM
Intel Ethernet Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad X13 Yoga Gen 1 (Machine type 20SX, 20SY)
Intel v25.5 SW release for Intel Ethernet products (For Unknown OS)
Intel v26.4 SW release for Intel Ethernet products (For Unknown OS)
Intel Networking Adapter/Device RHEL 8 Driver
Intel Networking Adapter/Device RHEL 9 Driver
Intel Networking Adapter/Device SLES 15 Driver
Intel v27.1 SW release for Intel Ethernet products (For Unknown OS)

Install updates from vendor's website.

Intel 800 Series Ethernet Linux Kernel Mode Driver - update to 1.15.4
Intel Ethernet Adapter Complete Driver Pack - update to 29.3
Intel Lan Driver for Windows 11 IoT 64-bit (version 22H2) - ThinkSmart One MTR - update to 12.19.2.60
Intel Lan Driver for Windows IoT 10 (64-bit) (version 21H2, 22H2) - ThinkSmart One Series - update to 12.19.2.60
Intel Lan Driver for Windows 11 IoT 64-bit (version 22H2) - ThinkSmart One ZOOM - update to 12.19.2.60
Intel Ethernet Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad X13 Yoga Gen 1 (Machine type 20SX, 20SY) - update to 12.19.2.60
Intel v25.5 SW release for Intel Ethernet products (For Unknown OS) - update to 29.3
Intel v26.4 SW release for Intel Ethernet products (For Unknown OS) - update to 29.3
Intel Networking Adapter/Device RHEL 8 Driver - update to 29.3
Intel Networking Adapter/Device RHEL 9 Driver - update to 29.3
Intel Networking Adapter/Device SLES 15 Driver - update to 29.3
Intel v27.1 SW release for Intel Ethernet products (For Unknown OS) - update to 29.3

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01236.html

• Information disclosure in Intel 800 Series Ethernet Driver
• Lenovo update for Intel 800 Series Ethernet driver
• Multiple vulnerabilities in Dell PowerEdge Server