Loading story…
Intel disclosed multiple vulnerabilities in Linux kernel-mode Ethernet drivers for its 700 Series, 800 Series, and I350 Series network adapters, warning that authenticated local users could exploit the flaws for privilege escalation, information disclosure, or denial of service. The most severe issue listed in INTEL-SA-01296 is CVE-2025-24325, rated CVSS 4.0 9.3 Critical, affecting some Intel 800 Series Ethernet drivers before version 1.17.2; Intel said the advisory covers eight CVEs tied to improper input validation, insufficient control flow management, exceptional-condition handling, and integer overflow. A separate advisory, INTEL-SA-01335, covers Intel 700 Series and I350 Series Linux drivers, including 700 Series flaws such as CVE-2025-24486, CVE-2025-21086, and CVE-2025-25273, which can expose vulnerable kernel code paths in the i40e driver and potentially lead to root-level compromise on affected Linux systems.
Intel said affected 700 Series driver versions earlier than 2.28.5 and I350 Series driver versions earlier than 5.19.2 should be upgraded, while 800 Series deployments should move to 1.17.2 or later; fixes are also available through the Intel Ethernet Adapter Complete Driver Pack version 30.0.1 or later. The impacted hardware spans widely deployed enterprise and cloud platforms, including Intel I710, X710, XL710, XXV710, V710, X722, and multiple Xeon- and Atom-based systems. Intel said the vulnerabilities were discovered internally and released under coordinated disclosure after mitigations became available, and public reporting indicated no proof-of-concept exploit had been released for the highlighted 700 Series issues at the time of publication.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Lenovo addressed CVE-2025-4423, a System Management Mode buffer overflow vulnerability in certain Lenovo all-in-one desktops using Insyde-based UEFI firmware, through advisory LEN-201013 and coordinated firmware updates. The flaw was described as one of six related SMM vulnerabilities identified by Binarly researchers.
Lenovo disclosed six vulnerabilities in code developed specifically for its products, affecting SMM-related modules including EfiSmiServices and SetupAutomationSmm. The flaws included memory corruption, arbitrary code write, improper input validation, stack overflow, and information disclosure issues, and users were directed to Lenovo's Product Security Advisories and Announcements page for details.
Intel disclosed multiple vulnerabilities affecting certain Linux kernel-mode Ethernet drivers for Intel 700 Series and Intel I350 Series devices. Intel released updated drivers, including fixes in 700 Series driver version 2.28.5 and I350 driver version 5.19.2, and said the issues were discovered internally and disclosed after mitigations became available.
Intel disclosed eight vulnerabilities affecting Linux kernel-mode drivers for some Intel 800 Series Ethernet devices prior to version 1.17.2. Intel said mitigations were available and recommended upgrading to driver version 1.17.2 or later, including via Intel Ethernet Adapter Complete Driver Pack 30.0.1 or later.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
9 references tracked. Mallory keeps watching after this page renders.
zeropath.com
Open sourcezeropath.com
Open sourcezeropath.com
Open sourcezeropath.com
Open sourceinsyde.com
Open sourcezeropath.com
Open sourcezeropath.com
Open sourceintel.com
Open sourceintel.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
F5 published security advisories regarding two privilege escalation vulnerabilities affecting the Linux kernel-mode driver for Intel 700 Series Ethernet adapters, identified as CVE-2025-24486 and CVE-2025-25273. Both vulnerabilities could allow an authenticated local user to escalate privileges via improper input validation and insufficient control flow management, respectively, in driver versions prior to 2.28.5. F5 confirmed that none of its products are affected by either vulnerability after evaluating all currently supported releases. The advisories clarify that these issues do not impact F5 products, and no action is required for F5 customers. The company will not update the advisories further unless new information emerges. Customers are encouraged to review the security response policy and subscribe to notifications for future updates regarding F5 product security.
Jun 29, 2026
Intel disclosed and patched several vulnerabilities affecting **Intel Xeon** server processors, including firmware and trusted execution flaws that can lead to **local privilege escalation** and, in one case, denial of service. In advisory **`INTEL-SA-01313`**, Intel said **`CVE-2025-20053`** and **`CVE-2025-24305`** affect multiple Xeon families, including 4th and 5th Gen Xeon Scalable, Xeon W2400/W3400, and some Xeon 6 products, with the bugs tied to **SGX** buffer handling and **ACTM** firmware control flow. Intel also noted **`CVE-2025-21090`** as a local denial-of-service issue and said the vulnerabilities were discovered internally, with mitigations delivered through firmware updates from system manufacturers. Intel separately issued **`INTEL-SA-01367`** for **Xeon 6 Birch Stream** processors, covering **`CVE-2025-26403`** and **`CVE-2025-32086`**, two high-severity flaws that affect systems using **`SGX`** or **`TDX`** and could let a privileged local user escalate privileges through out-of-bounds writes or improper security checks. Related reporting also highlighted additional Xeon 6 risks involving **OOB-MSM** access control (**`CVE-2025-22839`**), **TDX** memory-range overlap handling (**`CVE-2025-22889`**), and instruction-sequence-triggered privilege escalation (**`CVE-2025-22840`**), underscoring continued exposure in confidential computing and hardware management features. Intel released microcode and firmware mitigations and advised customers to install the latest updates from their OEM or system vendor.
Jun 29, 2026
Intel has disclosed several high-severity vulnerabilities in its PROSet/Wireless WiFi Software for Windows, all of which could allow an unprivileged, unauthenticated attacker to cause a denial of service on affected systems. The vulnerabilities, identified as CVE-2025-35971, CVE-2025-35963, CVE-2025-30255, and CVE-2025-33029, are present in device drivers operating in Ring 2 and affect software versions prior to 23.160. Exploitation does not require user interaction or special internal knowledge, and can be performed via adjacent network access, potentially impacting system availability and, in some cases, integrity. Intel has released security updates to address these vulnerabilities and recommends that users update to the latest version to mitigate risk. The vulnerabilities are rated as high severity with a CVSS 4.0 base score of 8.3, and their exploitation could result in significant disruption to wireless connectivity on affected devices. No remote exploitation is possible, but the low complexity of the attack increases the urgency for patching in enterprise environments relying on Intel wireless solutions.
Jun 29, 2026