CVE-2020-24503

Published: 17 February 2021

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.

Notes

Author	Note
sbeattie	these are Intel's out-of-tree drivers.

Priority

Cvss 3 Severity Score

5.5

Score breakdown

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Not vulnerable (out-of-tree driver)
	groovy	Not vulnerable (out-of-tree driver)
	trusty	Ignored (was not-affected (out-of-tree driver) ESM criteria)
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-aws Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Not vulnerable (out-of-tree driver)
	groovy	Not vulnerable (out-of-tree driver)
	trusty	Ignored (was not-affected (out-of-tree driver) ESM criteria)
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-aws-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.4)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-aws-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-aws-hwe Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-azure Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Not vulnerable (out-of-tree driver)
	groovy	Not vulnerable (out-of-tree driver)
	trusty	Ignored (was not-affected (out-of-tree driver) ESM criteria)
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-azure-4.15 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-azure-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.4)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-azure-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-azure-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-dell300x Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gcp Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.3)
	focal	Not vulnerable (out-of-tree driver)
	groovy	Not vulnerable (out-of-tree driver)
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-gcp-4.15 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gcp-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.4)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gcp-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gcp-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.3)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gke-4.15 Launchpad, Ubuntu, Debian	bionic	Ignored (end of life, was not-affected)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gke-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (end of standard support, was not-affected)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gke-5.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gke-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gkeop Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (out-of-tree driver)
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-gkeop-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-hwe Launchpad, Ubuntu, Debian	bionic	Ignored (replaced by linux-hwe-5.4)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-hwe-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-hwe-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (out-of-tree driver)
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-hwe-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-hwe-5.4)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Ignored (superseded by linux-hwe)
linux-kvm Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Not vulnerable (out-of-tree driver)
	groovy	Not vulnerable (out-of-tree driver)
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-lts-trusty Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-lts-xenial Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	groovy	Does not exist
	trusty	Ignored (was not-affected (out-of-tree driver) ESM criteria)
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-oem Launchpad, Ubuntu, Debian	bionic	Ignored (end of life, was not-affected)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Ignored (end of standard support)
linux-oem-5.10 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (out-of-tree driver)
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-oem-5.6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (out-of-tree driver)
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-oem-osp1 Launchpad, Ubuntu, Debian	bionic	Ignored (end of standard support, was not-affected)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-oracle Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Not vulnerable (out-of-tree driver)
	groovy	Not vulnerable (out-of-tree driver)
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-oracle-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-oracle-5.3)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-oracle-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-oracle-5.4)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-oracle-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-raspi Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (out-of-tree driver)
	groovy	Not vulnerable (out-of-tree driver)
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-raspi-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-raspi2 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Ignored (replaced by linux-raspi)
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)
linux-raspi2-5.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-riscv Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (end of life, was not-affected)
	groovy	Not vulnerable (out-of-tree driver)
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Does not exist
linux-snapdragon Launchpad, Ubuntu, Debian	bionic	Not vulnerable (out-of-tree driver)
	focal	Does not exist
	groovy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (out-of-tree driver)
	xenial	Not vulnerable (out-of-tree driver)

Severity score breakdown

Parameter	Value
Base score	5.5
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	None
Availability impact	None
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›