What’s Vulnerable › Vulnerabilities

CVE-2020-24489

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-09 · updated 2026-10-08
Weakness: CWE-459

Description

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

Debian Linux: 9.0, 10.0
Intel Atom X5-E3930: all versions
Intel Atom X5-E3940: all versions
Intel Atom X7-E3950: all versions
Intel Celeron J1750: all versions
Intel Celeron J1800: all versions
Intel Celeron J1850: all versions
Intel Celeron J1900: all versions
Intel Celeron J3060: all versions
Intel Celeron J3160: all versions
Intel Celeron J3355: all versions
Intel Celeron J3355E: all versions
Intel Celeron J3455: all versions
Intel Celeron J3455E: all versions
Intel Celeron J4005: all versions
Intel Celeron J4025: all versions
Intel Celeron J4105: all versions
Intel Celeron J4115: all versions
Intel Celeron J4125: all versions
Intel Celeron J6412: all versions
Intel Celeron J6413: all versions
Intel Celeron N2805: all versions
Intel Celeron N2806: all versions
Intel Celeron N2807: all versions
Intel Celeron N2808: all versions
Intel Celeron N2810: all versions
Intel Celeron N2815: all versions
Intel Celeron N2820: all versions
Intel Celeron N2830: all versions
Intel Celeron N2840: all versions

References

Get alerted when CVE-2020-24489 or the next vulnerability affects your stack