CVE-2019-0148: Medium severity intel ethernet controller x710-tm4 vulnerability
Published Nov 14, 2019
·Updated
Last updated 25 April 2025
Other sources
Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
— Launchpad
Affected Software
26 affected componentsFixes available
All of the following
Intel Ethernet Controller X710-tm4 Firmware<7.0
Intel Ethernet Controller X710-tm4
All of the following
Intel Ethernet Controller X710-at2 Firmware<7.0
Intel Ethernet Controller X710-at2
All of the following
Intel Ethernet Controller Xxv710-am2 Firmware<7.0
Intel Ethernet Controller Xxv710-am2
All of the following
Intel Ethernet Controller Xxv710-am1 Firmware<7.0
Intel Ethernet Controller Xxv710-am1
All of the following
Intel Ethernet Controller X710-bm2 Firmware<7.0
Intel Ethernet Controller X710-bm2
All of the following
Intel Ethernet Controller 710-bm1 Firmware<7.0
Intel Ethernet Controller 710-bm1
Intel Ethernet 700 Series Software<24.0
Intel Ethernet Controller X710-tm4 Firmware<7.0
Intel Ethernet Controller X710-tm4
Intel Ethernet Controller X710-at2 Firmware<7.0
Intel Ethernet Controller X710-at2
Intel Ethernet Controller Xxv710-am2 Firmware<7.0
Intel Ethernet Controller Xxv710-am2
Intel Ethernet Controller Xxv710-am1 Firmware<7.0
Intel Ethernet Controller Xxv710-am1
Intel Ethernet Controller X710-bm2 Firmware<7.0
Intel Ethernet Controller X710-bm2
Intel Ethernet Controller 710-bm1 Firmware<7.0
Intel Ethernet Controller 710-bm1
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1
Remediation
Event History
Nov 14, 2019
CVE Published
via MITRE·06:23 PM
Data Sourced
via MITRE·06:23 PM
DescriptionWeakness
Jan 11, 2024
Data Sourced
via Launchpad·11:11 PM
Description
May 6, 2025
Data Sourced
via Ubuntu·03:46 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·03:46 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-0148?
CVE-2019-0148 is classified as a potential denial of service vulnerability that may be exploited by an authenticated user.
2
How do I fix CVE-2019-0148?
To mitigate CVE-2019-0148, upgrade your Intel Ethernet 700 Series Controller drivers to version 7.0 or later.
3
Which products are affected by CVE-2019-0148?
CVE-2019-0148 affects versions prior to 7.0 of the Intel Ethernet 700 Series Controllers and the related Linux packages.
4
Can CVE-2019-0148 be exploited remotely?
CVE-2019-0148 requires local access, meaning it cannot be exploited remotely.
5
What type of attack does CVE-2019-0148 enable?
CVE-2019-0148 can lead to a denial of service condition affecting system availability.