Greg Thomas

**Name of the Vulnerable Software and Affected Versions** Intel(R) QAT Library versions prior to 22.07.1 **Description** The issue is related to improper buffer restrictions, which may allow a privileged user to potentially enable information disclosure via local access. **Recommendations** For versions prior to 22.07.1, update to version 22.07.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) QAT drivers for Linux versions prior to 4.17 **Description** The issue is related to incorrect default permissions in the software installer for some Intel(R) QAT drivers, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could allow an attacker to elevate their privileges. **Recommendations** For versions prior to 4.17, update to version 4.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected installer components to minimize the risk of exploitation.

**Nome do software vulnerável e versões afetadas** Software QATzip mantido pela Intel(R), versões anteriores à 1.0.9 **Descrição** O problema está relacionado a um controle de acesso inadequado no software QATzip, o que pode permitir que um usuário autenticado potencialmente consiga escalar privilégios por meio de acesso local. **Recomendações** Para versões anteriores à 1.0.9, atualize para a versão 1.0.9 ou posterior para resolver o problema.