Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2023-25775: Intel Ethernet RDMA driver may let network user gain admin
CVE-2023-25775 · published 3 years ago
Summary
The Intel Ethernet Controller’s RDMA driver in Linux builds older than version 1.9.30 can be tricked over the network to give a remote user higher system rights. This could let an attacker take control of the machine. Update the driver to version 1.9.30 or later, or apply the security updates supplied by your Linux distribution.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1050.55~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1052.60~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1047.55~20.04.1.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1033.39~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-89.99~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1043.46~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1045.51~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-89.99~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1020.20~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1048.54~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1046.50~20.04.1.
- Update canonical linux to version 5.15.0-89.99.
- Update canonical linux-aws to version 5.15.0-1050.55.
- Update canonical linux-aws-6.2 to version 6.2.0-1016.16~22.04.1.
- Update canonical linux-azure to version 5.15.0-1052.60.
- Update canonical linux-azure-6.2 to version 6.2.0-1017.17~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1052.60.1.
- Update canonical linux-azure-fde-6.2 to version 6.2.0-1017.17~22.04.1.1.
- Update canonical linux-gcp to version 5.15.0-1047.55.
- Update canonical linux-gcp-6.2 to version 6.2.0-1019.21~22.04.1.
- Update canonical linux-gke to version 5.15.0-1047.52.
- Update canonical linux-gkeop to version 5.15.0-1033.39.
- Update canonical linux-hwe-6.2 to version 6.2.0-37.38~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1043.46.
- Update canonical linux-intel-iotg to version 5.15.0-1045.51.
- Update canonical linux-kvm to version 5.15.0-1047.52.
- Update canonical linux-lowlatency to version 5.15.0-89.99.
- Update canonical linux-lowlatency-hwe-6.2 to version 6.2.0-1017.17~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1041.41.
- Update canonical linux-nvidia-6.2 to version 6.2.0-1012.12.
- Update canonical linux-nvidia-tegra to version 5.15.0-1020.20.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1007.7.
- Update canonical linux-oem-6.1 to version 6.1.0-1023.23.
- Update canonical linux-oem-6.5 to version 6.5.0-1004.4.
- Update canonical linux-oracle to version 5.15.0-1048.54.
- Update canonical linux-raspi to version 5.15.0-1043.46.
- Update canonical linux-starfive-6.2 to version 6.2.0-1009.10~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1027.31.
- Update canonical linux-bluefield to version 5.15.0-1032.34.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1043.45.
- Update canonical linux-realtime to version 5.15.0-1051.57.
- Update debian linux to version 6.1.55-1.
- Update debian linux to version 6.5.3-1.
- Update intel ethernet_controller_rdma_driver_for_linux to version 1.9.30 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1050.55~20.04.1 Fix: upgrade to 5.15.0-1050.55~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1052.60~20.04.1 Fix: upgrade to 5.15.0-1052.60~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1047.55~20.04.1 Fix: upgrade to 5.15.0-1047.55~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1033.39~20.04.1 Fix: upgrade to 5.15.0-1033.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-89.99~20.04.1 Fix: upgrade to 5.15.0-89.99~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1043.46~20.04.1 Fix: upgrade to 5.15.0-1043.46~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1045.51~20.04.1 Fix: upgrade to 5.15.0-1045.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-89.99~20.04.1 Fix: upgrade to 5.15.0-89.99~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1020.20~20.04.1 Fix: upgrade to 5.15.0-1020.20~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1048.54~20.04.1 Fix: upgrade to 5.15.0-1048.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1046.50~20.04.1 Fix: upgrade to 5.15.0-1046.50~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
Showing 50 of 103. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-89.99 Fix: upgrade to 5.15.0-89.99
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 |
< 6.2.0-1016.16~22.04.1 Fix: upgrade to 6.2.0-1016.16~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1052.60 Fix: upgrade to 5.15.0-1052.60
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 |
< 6.2.0-1017.17~22.04.1 Fix: upgrade to 6.2.0-1017.17~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1052.60.1 Fix: upgrade to 5.15.0-1052.60.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 |
< 6.2.0-1017.17~22.04.1.1 Fix: upgrade to 6.2.0-1017.17~22.04.1.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1047.55 Fix: upgrade to 5.15.0-1047.55
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 |
< 6.2.0-1019.21~22.04.1 Fix: upgrade to 6.2.0-1019.21~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1047.52 Fix: upgrade to 5.15.0-1047.52
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1033.39 Fix: upgrade to 5.15.0-1033.39
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 |
< 6.2.0-37.38~22.04.1 Fix: upgrade to 6.2.0-37.38~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1043.46 Fix: upgrade to 5.15.0-1043.46
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1045.51 Fix: upgrade to 5.15.0-1045.51
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1047.52 Fix: upgrade to 5.15.0-1047.52
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-89.99 Fix: upgrade to 5.15.0-89.99
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 |
< 6.2.0-1017.17~22.04.1 Fix: upgrade to 6.2.0-1017.17~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1041.41 Fix: upgrade to 5.15.0-1041.41
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 |
< 6.2.0-1012.12 Fix: upgrade to 6.2.0-1012.12
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1020.20 Fix: upgrade to 5.15.0-1020.20
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1007.7 Fix: upgrade to 5.15.0-1007.7
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 |
< 6.1.0-1023.23 Fix: upgrade to 6.1.0-1023.23
|
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 |
< 6.5.0-1004.4 Fix: upgrade to 6.5.0-1004.4
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1048.54 Fix: upgrade to 5.15.0-1048.54
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1043.46 Fix: upgrade to 5.15.0-1043.46
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 |
< 6.2.0-1009.10~22.04.1 Fix: upgrade to 6.2.0-1009.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1032.34 Fix: upgrade to 5.15.0-1032.34
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1043.45 Fix: upgrade to 5.15.0-1043.45
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1051.57 Fix: upgrade to 5.15.0-1051.57
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 6.1.55-1 Fix: upgrade to 6.1.55-1
|
| Debian:13 | debian | linux |
< 6.5.3-1 Fix: upgrade to 6.5.3-1
|
| Debian:14 | debian | linux |
< 6.5.3-1 Fix: upgrade to 6.5.3-1
|
| – | intel | ethernet_controller_rdma_driver_for_linux |
< 1.9.30 cpe:2.3:a:intel:ethernet_controller_rdma_driver_for_linux:*:*:*:*:*:*:*:* |
Original advisory text
Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network a...
Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.h... Third Party Advisory
- https://lore.kernel.org/all/[email protected]/ Third Party Advisory
- https://ubuntu.com/security/notices/USN-6415-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2023-25775 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-25775 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-25775 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6502-4 Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
- https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
- https://security.netapp.com/advisory/ntap-20230915-0013/
- https://ubuntu.com/security/notices/USN-6496-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6502-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6516-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6502-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6502-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6520-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6496-2 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
9.9
Critical
Type
CWE-284Improper Access Control
Timeline
Published11 Aug 2023
Updated31 Oct 2026
First seen17 Aug 2026
Track software like this
Free during beta