CVE-2025-27535

Medium

Description

Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

SeverityMedium

CVSS5.3

Exploit probability—

ProductIntel Ethernet Controller

PublishedFeb 10, 2026

First seenFeb 10, 2026

Weakness typeCWE-782CWE-782

How to fix

Update

intel ethernet_controller30.3 or later

Affected products

Product	Affected versions	Fixed in
intel ethernet_controller	v < 30.3	30.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.