Loading story…
F5 published security advisories regarding two privilege escalation vulnerabilities affecting the Linux kernel-mode driver for Intel 700 Series Ethernet adapters, identified as CVE-2025-24486 and CVE-2025-25273. Both vulnerabilities could allow an authenticated local user to escalate privileges via improper input validation and insufficient control flow management, respectively, in driver versions prior to 2.28.5. F5 confirmed that none of its products are affected by either vulnerability after evaluating all currently supported releases.
The advisories clarify that these issues do not impact F5 products, and no action is required for F5 customers. The company will not update the advisories further unless new information emerges. Customers are encouraged to review the security response policy and subscribe to notifications for future updates regarding F5 product security.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
F5 issued product advisory K000157330 for the Intel 700 Series Ethernet vulnerability tracked as CVE-2025-25273. The reference does not include further summary information.
F5 issued product advisory K000157321 بشأن the Intel 700 Series Ethernet vulnerability tracked as CVE-2025-24486. The reference provides no additional synopsis or technical details.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
F5 published product advisories addressing two Intel flaws affecting underlying platform components used in its ecosystem: **CVE-2025-24303**, an Intel 800 Series Ethernet vulnerability, and **CVE-2025-20027**, an Intel UEFI vulnerability. The notices indicate vendor tracking and customer guidance for issues tied to both network interface hardware and firmware layers, expanding the scope of exposure beyond application software into foundational infrastructure components. The paired advisories highlight risk across separate parts of the technology stack, with one issue involving Intel's 800 Series Ethernet technology and the other affecting Intel's UEFI environment. Organizations using F5 products are likely to review affected versions, platform dependencies, and available remediation or mitigation guidance in the vendor bulletins to determine whether appliance, firmware, or hardware-related updates are required.
Jun 29, 2026
Intel disclosed multiple vulnerabilities in Linux kernel-mode Ethernet drivers for its **700 Series**, **800 Series**, and **I350 Series** network adapters, warning that authenticated local users could exploit the flaws for **privilege escalation**, **information disclosure**, or **denial of service**. The most severe issue listed in `INTEL-SA-01296` is **CVE-2025-24325**, rated **CVSS 4.0 9.3 Critical**, affecting some Intel 800 Series Ethernet drivers before version `1.17.2`; Intel said the advisory covers eight CVEs tied to improper input validation, insufficient control flow management, exceptional-condition handling, and integer overflow. A separate advisory, `INTEL-SA-01335`, covers Intel 700 Series and I350 Series Linux drivers, including 700 Series flaws such as **CVE-2025-24486**, **CVE-2025-21086**, and **CVE-2025-25273**, which can expose vulnerable kernel code paths in the `i40e` driver and potentially lead to root-level compromise on affected Linux systems. Intel said affected 700 Series driver versions earlier than `2.28.5` and I350 Series driver versions earlier than `5.19.2` should be upgraded, while 800 Series deployments should move to `1.17.2` or later; fixes are also available through the **Intel Ethernet Adapter Complete Driver Pack** version `30.0.1` or later. The impacted hardware spans widely deployed enterprise and cloud platforms, including Intel **I710**, **X710**, **XL710**, **XXV710**, **V710**, **X722**, and multiple Xeon- and Atom-based systems. Intel said the vulnerabilities were discovered internally and released under coordinated disclosure after mitigations became available, and public reporting indicated no proof-of-concept exploit had been released for the highlighted 700 Series issues at the time of publication.
Jun 29, 2026
F5 published product advisories covering two separate upstream security flaws affecting widely used core components: **Linux kernel** vulnerability `CVE-2025-40154` and **OpenSSL** vulnerability `CVE-2025-68160`. The notices indicate vendor tracking and assessment activity for vulnerabilities in foundational software commonly embedded in network, application delivery, and security appliances. The advisories were released through F5's product advisory channel under knowledge base articles `K000160420` and `K000160552`. While the referenced notices provide limited public synopsis text, the combined updates show F5 alerting customers to potential product impact from both an operating system kernel issue and a cryptographic library flaw, signaling the need for customers to review affected-product guidance and remediation information as it becomes available.
Jun 29, 2026