Описание
Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| linux | fixed | 5.14.6-1 | package | |
| linux | ignored | bullseye | package | |
| linux | ignored | buster | package | |
| firmware-nonfree | fixed | 20210208-1 | package | |
| firmware-nonfree | ignored | stretch | package |
Примечания
Short of details: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html
Per Intel, this was fixed by a firmware update. v49.0.1 of the
firmware is required. The new firmware requires a kernel patch
https://git.kernel.org/linus/c784e5249e773689e38d2bc1749f08b986621a26
Firmware was added via https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=c487f7dadcd21116613441ed355b764003b3f57b
The vulnerability is fixed in firmware, but needs an updated Linux kernel to load
the updated firmware, thus also marking linux as affected
Связанные уязвимости
Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.
Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.
Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.
Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.
Уязвимость драйвера графических систем Intel Graphics Drivers для Windows, вызванная целочисленным переполнением, позволяющая нарушителю повысить свои привилегии