CVE-2020-24485: High severity intel trace analyzer and collector vulnerability
Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-24485?
CVE-2020-24485 is a vulnerability in the Intel FPGA OPAE Driver for Linux before kernel version 4.17 that may allow an authenticated user to potentially enable escalation of privilege via local access.
How severe is CVE-2020-24485?
CVE-2020-24485 has a severity rating of 7.8, which is considered high.
Which software is affected by CVE-2020-24485?
Intel Trace Analyzer and Collector versions up to and including 2020, update1, update2, and update3 are affected by CVE-2020-24485.
How can an authenticated user exploit CVE-2020-24485?
An authenticated user with local access can exploit CVE-2020-24485 to potentially enable escalation of privilege.
Where can I find more information about CVE-2020-24485?
For more information about CVE-2020-24485, you can refer to the advisory provided by Intel at the following URL: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00440.html