PT-2024-6473 · Intel · Intel Data Center Gpu Max Series

Published 2024-02-28 · Updated 2024-08-23 · CVE-2024-24580

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Data Center GPU Max Series versions 1100 and 1550

Description The issue is related to insufficient checking of unusual or exceptional states in the Intel Data Center GPU Max, which may allow a privileged user to potentially cause a denial of service via local access.

Recommendations For Intel Data Center GPU Max Series versions 1100 and 1550, consider restricting local access to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling any functionality that relies on the improper conditions check until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

CWE-92

Related Identifiers

BDU:2024-07559

CVE-2024-24580

Affected Products

Intel Data Center Gpu Max Series

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-24580 · Security Note
• https://bdu.fstec.ru/vul/2024-07559 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01094.html · Vendor Advisory
• https://vuldb.com/?id.274622 · Note
• https://twitter.com/CVEnew/status/1823719150490898740 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2024081516 · Note