Intel E810 Ethernet controller firmware (NVM): Firmware-level flaw in the E810 network controller allowing a privileged

CVE-2021-33128Firmware, BMC & network fabriccurated

Impact

Firmware-level flaw in the E810 network controller allowing a privileged local user to cause denial of service on the adapter. Individually minor; collectively they are the reason NIC firmware needs to be in your patch pipeline rather than frozen at whatever the OEM shipped.

Who can reach it

Privileged local access on the host.

What to do

Fixed in the E810 NVM (adapter firmware) image. Deploy with Intel's NVM Update Utility, which needs a driver reload and a power cycle - not just a warm reboot - for the new image to take effect. Drain the node. Distinct from the ice driver updates: you need both, and they ship on different schedules.

References

https://nvd.nist.gov/vuln/detail/CVE-2021-33128 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.