CVE-2025-24484

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-244857.5A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HT CVE-2025-244867.8Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authentic CVE-2025-244875.3An unauthenticated attacker can infer the existence of usernames in the system by querying an API.CVE-2025-244896.3An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to system compromise.CVE-2025-24498.8NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to CVE-2025-244906.5Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to use prepared statements in the SQL query CVE-2025-244916.7Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: Use CVE-2025-244934.7in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.CVE-2025-244947.2Path traversal may allow remote code execution using privileged account (requires device admin account, cannot be performed by a regular us CVE-2025-244955.6Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user CVE-2025-244967.5An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110. Specially crafte CVE-2025-244977.5When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which h