Intel publishes 41 advisories for over 90 flaws, one critical
Take action: If your computer is using the Intel Neural Compressor (usually running in AI workloads) patch ASAP. For all the rest, keep to your regular updating schedule, just don't ignore these patches forever.
Learn More
Intel released 41 security advisories on the latest Patch Tuesday, addressing over 90 security vulnerabilities across its product range. This package of updates includes one critical severity flaw in Intel Neural Compressor, among other high and medium-severity vulnerabilities.
Critical Vulnerability
- CVE-2024-22476 (CVSS score: 10.0) is a flaw in Intel Neural Compressor that enables escalation of privilege via remote access. This vulnerability allows an unauthenticated attacker to escalate privileges remotely. Intel Neural Compressor is a tool designed for optimizing AI language models, reducing their size, and enhancing the speed of large language models (LLMs).
High-severity flaws were identified in the following Intel products that could lead to privilege escalation attacks, denial-of-Service (DoS) and nformation disclosure
- UEFI firmware of server products
- Arc & Iris Xe Graphics software
- PROSet/Wireless
- Power Gadget
- Trust Domain Extensions
- Secure Device Manager
- Dynamic Tuning Technology
- Thunderbolt
- Graphics Performance Analyzers
- BIOS Guard and Platform Properties Assessment Module
- Ethernet Controller I225 Manageability products
Medium-severity vulnerabilities were identified in the following Intel products that could lead to privilege escalation attacks, denial-of-Service (DoS) and nformation disclosure
- Meteor Lake Core Ultra processors
- Data Streaming Accelerator and Analytics Accelerator
- Processor Diagnostic Tool
- Graphics Performance Analyzers
- Extreme Tuning Utility
- Computing Improvement Program
- Ethernet Controller Administrative Tools
- Quartus Prime
- Processor Identification Utility
- Programmable Gate Array
- Core Ultra processor
- Advisor products
- Inspector
- Distribution for GDB
- Data Center GPU Max Series
- Performance Counter Monitor
- VTune Profiler
- Chipset Device Software
- Driver & Support Assistant
- Context Sensing Technology
- Arc Control
- Libva library
- Dynamic Load Balancer
- Graphics Command Center Service
- Endurance Gaming Mode
- Server Board onboard video driver
- Media SDK
- oneAPI Video Processing Library
Intel has released patches and mitigations for the majority of these vulnerabilities. Users are urged to update their systems to the latest versions to ensure security. For those using Intel Neural Compressor, it is critical to apply the updates immediately due to the CVE-2024-22476 vulnerability.
