PatchTheCVEethernet controller vulnerabilities and fixes
Recent CVEs affecting ethernet controller, with upgrade or downgrade steps. 4 tracked.
Also searched as: ethernetcontroller.
ethernet controller has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-10. Highest priority: CVE-2025-32003 (score 28/100).
- CVE-2025-32003 MEDIUM 6.5 UPGRADE Out-of-bounds read in the firmware for some 100GbE Intel(R) Ethernet Network Adapter E810 before version cvl f
- CVE-2025-27535 MEDIUM 5.3 UPGRADE Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C
- CVE-2025-27243 MEDIUM 6.0 UPGRADE Out-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x w
- CVE-2025-24851 MEDIUM 6.0 UPGRADE Uncaught exception in the firmware for some 100GbE Intel(R) Ethernet Controller E810 before version cvl fw 1.7
FAQ
How do I fix ethernet controller vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ethernet controller being exploited right now?
None of the tracked ethernet controller CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ethernet controller CVE should I patch first?
CVE-2025-32003 currently ranks highest (28/100): Out-of-bounds read in the firmware for some 100GbE Intel(R) Ethernet Network Adapter E810 before version cvl f.